Questions

Have a question or an answer regarding GO SSL ACME?

Keep the same DNS challenge string for renewals?
Hi, we've got some internal-only sites we would like to protect, and DNS verification seems to match nicely. We do not have a nice way to restrict DNS API access to just the TXT records we need,…
- Captain Mish
- Captain_Mish
- 4 wk ago
- 1 reply
- 28
- Andriy Mahatsofficial rep3 wk ago
- Questions
- Answered
- Answered
The conference.test.su subdomain
Good afternoon. I can't add the conference.test.su subdomain to the certificate. Does not work: certbot certonly --webroot -w /var/www/thttpd/ -d test.su,conference.test.su,mail.test.…
- Юрий Кощеев
- aquamarine_seashore
- 1 mth ago
- 2 replies
- 23
- Magnus4 wk ago
- Questions
- Answered
- Answered
Support for OCSP Must-Staple
Hello, Could you add OCSP Must-Staple to GO SSL ACME? Thank you :)
- Chris Hoye
- Chris_Hoye
- 1 mth ago
- 1 reply
- 31
- Andriy Mahatsofficial repyesterday
- Questions
- Answered
- Answered
Support for verifying challenges over IPv6
I tried to grab a certificate for a IPv6-only service but it did not work until I added a IPv4 proxy in front of it to answer the http-01 challenge. Is IPv6 going to be supported for ACME?
- Andre Tomt
- Andre_Tomt
- 1 mth ago
- 3 replies
- 39
- Andriy Mahatsofficial repyesterday
- Questions
- Answered
- Answered
Buypass is not compatible with ACME client "dehydrated"
Hi, I'm using the ACME client " dehydrated " which is also included in some major Linux distributions ( e.g. Debian ) and wanted to try Buypass instead of Let's Encrypt.…
- Ulrich Gaertner
- Gaertner
- 2 mths ago
- 2 replies
- 62
- Ulrich Gaertner2 mths ago
- Questions
- Answered
- Answered
mail and acme-client
I am a regular user of OpenBSD, which provides an acme client named ... acme-client (sic). This client does not have an option to register, notably no mail is provided.…
- 22Decembre
- 22Decembre
- 3 mths ago
- 3 replies
- 52
- 1
- 22Decembre3 mths ago
- Questions
- Answered
- Answered
ACME V2 error: HTTP 406 Not Acceptable
Hi, I developed 3 ACME clients for less tech-savvy users. Two do automation on shared hosting (issue + install SSL). One of them listed on the Let's Encrypt website.…
- Anindya
- anindya
- 4 mths ago
- 2 replies
- 63
- Anindya3 wk ago
- Questions
- Answered
- Answered
"Certificate won't be issued for more than 2 domain(s)"
Hello, in the information article for Buypass Go SSL it is stated that "Our ACME v2 supports up to 5 domain names in a certificate." However, I am unable to obtain a certificate with three domain…
- Calvin Hoy
- Calvin_Hoy
- 4 mths ago
- 2 replies
- 101
- Calvin Hoy4 mths ago
- Questions
- Answered
- Answered
Chain/fullchain file contains unexpected characters
Chain file contains unexpected characters also partially in DOS format (with CRLF) While obtaining a certificate using certbot 0.28.0 the saved chain file contains additional characters at the…
- Jozsef Szilagyi
- Jozsef_Szilagyi
- 5 mths ago
- 3 replies
- 39
- 1
- Jozsef Szilagyi5 mths ago
- Questions
- Answered
- Answered
ACME V2 - staging vs production behaviour is different.
Currently the ACME V2 API will issue a certificate for multiple domain names/subdomain in Staging mode, but the live API will only issue a single domain + www.…
- webprofusion
- webprofusion
- 6 mths ago
- 4 replies
- 130
- 1
- Magnus4 mths ago
- Questions
- Answered
- Answered
v2 new-order failure internal error (with log)
We get an internal error message while trying to request a new certificate using acme v2. Do you have any more information on why it failed ? {"code":500,"message":"INTERNAL_SERVER_ERROR","details":…
- Jay737
- Jay737
- 6 mths ago
- 2 replies
- 60
- Jay7376 mths ago
- Questions
- Answered
- Answered
Buypass not sending CAA violation reports (IODEF)
Hi, In the Buypass documentation on CAA, it says that Buypass will send reports via email in IODEF format when a CAA policy violation occurs: Buypass uses iodef and will report certificate…
- Jamie Scaife
- Jamieweb
- 7 mths ago
- 8 replies
- 78
- 2
- Jamie Scaife6 mths ago
- Questions
- Answered
- Answered
New windows client using ACME v2 endpoint
Hi, Our app https://certifytheweb.com will shortly be releasing a new version which supports Buypass ACME v2. I wondered if you (buypass) need to be notified?…
- webprofusion
- webprofusion
- 7 mths ago
- 1 reply
- 49
- Magnus7 mths ago
- Questions
- Answered
- Answered
Support for IDN Domains
I could not find any information on buypass and IDN domains. Will domain names containing german umlauts (written in punny-code starting with xn--) work with certbot and the buypass API?…
- Georg
- Georg
- 7 mths ago
- 4 replies
- 64
- Georg7 mths ago
- Questions
- Answered
- Answered
v2 new-order failure internal error
We get an internal error message while trying to request a new certificate using acme v2: {"code":500,"message":"INTERNAL_SERVER_ERROR","details":"HTTP 500 Internal Server Error"} I'm not sure what…
- Jay9827348
- Jay9827348
- 8 mths ago
- 2 replies
- 45
- Magnus7 mths ago
- Questions
- Answered
- Answered
Deviation from RFC8555
Hello, I am the author of uacme I've found that your ACME server returns an empty body when it responds to a request for the account URL given a key according to RFC8555 section 7.3.…
- Nicola Di Lieto
- Nicola_Di_Lieto
- 8 mths ago
- 2 replies
- 93
- Mats Kongssundofficial rep6 mths ago
- Questions
- Answered
- Answered
RFC8555 section 7.3.1 compliance
Hello, With my ACMEv2 client implementation https://github.com/bruncsak/ght-acme.sh I got the following error when trying to retrieve the KID: HTTP/1.1 400 Bad Request {"type":"urn:ietf:params:acme:…
- Attila
- bruat
- 8 mths ago
- 8 replies
- 95
- Attila6 mths ago
- Questions
- Answered
- Answered
What's the IP of the http-01 challenge?
Hi, We're trying to install the free buypass SSL certificate using certbot on a server behind a firewall. We whitelisted buypass.com , and I was able to register the server,…
- Elie Obeid
- Elie_Obeid
- 9 mths ago
- 1 reply
- 80
- Magnus9 mths ago
- Questions
- Answered
- Answered
How to invalidate pending authorizations
Hi, I'm having trouble creating a new credential. Currently I am using buypass go ssl and when I try to generate new authentication information using certbot I get a [RATE_LIMITED] error and it does…
- Dongyeon
- Dongyeon
- 10 mths ago
- 3 replies
- 50
- Andriy Mahatsofficial rep7 mths ago
- Questions
- Answered
- Answered
Error: All authorizations were not finalized by the CA
I am unable to issue certificate using http-01 method from api.buypass.com . It throws following error: Waiting for verification... Cleaning up challenges All authorizations were not finalized by…
- ProK
- proK
- 11 mths ago
- 5 replies
- 121
- Elie Obeid9 mths ago
- Questions
- Answered
- Answered
DNS challenge: authz is pending, challenge processing even after error is present
Hi @Andriy Mahats, I've noticed the following behavior when trying DNS validation with the ACME v2 (RFC 8555) staging endpoint: in case challenges fail,…
- Felix Fontein
- Felix_Fontein
- 1 yr ago
- 1 reply
- 74
- 1
- Andriy Mahatsofficial rep11 mths ago
- Questions
- Answered
- Answered
Finding existing accounts (by key) and revocation
Hi, while testing the Ansible ACME client, I found some things which might be of interest: 1. When trying to look up an account from its public key without specifying onlyReturnExisting:…
- Felix Fontein
- Felix_Fontein
- 1 yr ago
- 2 replies
- 52
- Felix Fontein1 yr ago
- Questions
- Answered
- Answered
Trouble with ACME v1 endpoint
Hi, I'm currently tring to add support for Buypass' ACME endpoints to the Ansible acme_certificate ACME client ( https://docs.ansible.com/ansible/latest/modules/acme_certificate_module.html ).…
- Felix Fontein
- Felix_Fontein
- 1 yr ago
- 2 replies
- 51
- Felix Fontein1 yr ago
- Questions
- Answered
- Answered
http-01 DCV not working in ACME v2 Test endpoint
We have our own JAVA ACME Client which is tested and running successfully for quite a long time. We are successfully purchasing certificates from Let's Encrypt CA using the client.…
- Devarajan
- Devarajan
- 1 yr ago
- 1 reply
- 64
- Andriy Mahatsofficial rep1 yr ago
- Questions
- Answered
- Answered
Issue while generating certificate from DNS challenge
Before 5 months I created SSL certificate for my domain lets-example.com using Buypass through HTTP-01 method. Now as the certificate is going to expire,…
- ProK
- proK
- 1 yr ago
- 5 replies
- 80
- Andriy Mahatsofficial rep1 yr ago
- Questions
- Answered
- Answered

1 2 Next

Have a question or an answer regarding GO SSL ACME?

Buypass Official Community

This is the official community of Buypass. A Root CA located in Norway.

Community

Questions

Keep the same DNS challenge string for renewals?

The conference.test.su subdomain

Support for OCSP Must-Staple

Support for verifying challenges over IPv6

Buypass is not compatible with ACME client "dehydrated"

mail and acme-client

ACME V2 error: HTTP 406 Not Acceptable

"Certificate won't be issued for more than 2 domain(s)"

Chain/fullchain file contains unexpected characters

ACME V2 - staging vs production behaviour is different.

v2 new-order failure internal error (with log)

Buypass not sending CAA violation reports (IODEF)

New windows client using ACME v2 endpoint

Support for IDN Domains

v2 new-order failure internal error

Deviation from RFC8555

RFC8555 section 7.3.1 compliance

What's the IP of the http-01 challenge?

How to invalidate pending authorizations

Error: All authorizations were not finalized by the CA

DNS challenge: authz is pending, challenge processing even after error is present

Finding existing accounts (by key) and revocation

Trouble with ACME v1 endpoint

http-01 DCV not working in ACME v2 Test endpoint

Issue while generating certificate from DNS challenge

Buypass Official Community

Categories

Top contributors

Recent activity

Home

Buypass Official Community