Buypass Company Site

How to enable Javascript

Questions

All topics

GO SSL ACME

Have a question or an answer regarding GO SSL ACME?

Buypass support for RFC 8738?
Hi, I am using uacme, an ACME client with support for RFC 8738 which extends the ACME protocol to allow it to issue certificates for IP addresses. This currently fails with Buypass,…
- Leon White
- Leon_White
- 2 yrs ago
- 1 reply
- 143
- Kongssundofficial rep2 yrs ago
- Questions
- Answered
- Answered
Authentication after updating CAA
I attempted to fetch a certificate and had forgotten to update CAA to include permission for buypass. Obviously this failed, but after fixing this any further attempts with the same fqdn are…
- Stuart Henderson
- Stuart_Henderson
- 2 yrs ago
- 1 reply
- 102
- 1
- Andriy Mahatsofficial rep2 yrs ago
- Questions
- Answered
- Answered
Rate Limits?
The common errors page lists a "rateLimited": "The request exceeds a rate limit". What limits are there? Searching for "rate limit" only returns that page.
- azdle
- azdle
- 2 yrs ago
- 1 reply
- 160
- maov2 yrs ago
- Questions
- Answered
- Answered
ACME for DV and OV certificates?
Hi! As I understand the current state of things with Buypass, only the free SSL Go certificates are supported for ACME automation. However, this doesn't seem to be a limitation of ACME,…
- Thomas Qvidahl
- Thomas_Qvidahl
- 2 yrs ago
- 1 reply
- 134
- maov2 yrs ago
- Questions
- Answered
- Answered
Keep the same DNS challenge string for renewals?
Hi, we've got some internal-only sites we would like to protect, and DNS verification seems to match nicely. We do not have a nice way to restrict DNS API access to just the TXT records we need,…
- Captain Mish
- Captain_Mish
- 2 yrs ago
- 1 reply
- 166
- Andriy Mahatsofficial rep2 yrs ago
- Questions
- Answered
- Answered
The conference.test.su subdomain
Good afternoon. I can't add the conference.test.su subdomain to the certificate. Does not work: certbot certonly --webroot -w /var/www/thttpd/ -d test.su,conference.test.su,mail.test.…
- Юрий Кощеев
- aquamarine_seashore
- 2 yrs ago
- 2 replies
- 109
- maov2 yrs ago
- Questions
- Answered
- Answered
Support for OCSP Must-Staple
Hello, Could you add OCSP Must-Staple to GO SSL ACME? Thank you :)
- Chris Hoye
- Chris_Hoye
- 2 yrs ago
- 1 reply
- 150
- 1
- Andriy Mahatsofficial rep2 yrs ago
- Questions
- Answered
- Answered
Support for verifying challenges over IPv6
I tried to grab a certificate for a IPv6-only service but it did not work until I added a IPv4 proxy in front of it to answer the http-01 challenge. Is IPv6 going to be supported for ACME?
- Andre Tomt
- Andre_Tomt
- 2 yrs ago
- 3 replies
- 142
- Andriy Mahatsofficial rep2 yrs ago
- Questions
- Answered
- Answered
Buypass is not compatible with ACME client "dehydrated"
Hi, I'm using the ACME client " dehydrated " which is also included in some major Linux distributions ( e.g. Debian ) and wanted to try Buypass instead of Let's Encrypt.…
- Ulrich Gaertner
- Gaertner
- 2 yrs ago
- 2 replies
- 174
- Ulrich Gaertner2 yrs ago
- Questions
- Answered
- Answered
mail and acme-client
I am a regular user of OpenBSD, which provides an acme client named ... acme-client (sic). This client does not have an option to register, notably no mail is provided.…
- 22Decembre
- 22Decembre
- 2 yrs ago
- 3 replies
- 131
- 1
- 22Decembre2 yrs ago
- Questions
- Answered
- Answered
ACME V2 error: HTTP 406 Not Acceptable
Hi, I developed 3 ACME clients for less tech-savvy users. Two do automation on shared hosting (issue + install SSL). One of them listed on the Let's Encrypt website.…
- Anindya
- anindya
- 2 yrs ago
- 2 replies
- 139
- Anindya2 yrs ago
- Questions
- Answered
- Answered
"Certificate won't be issued for more than 2 domain(s)"
Hello, in the information article for Buypass Go SSL it is stated that "Our ACME v2 supports up to 5 domain names in a certificate." However, I am unable to obtain a certificate with three domain…
- Calvin Hoy
- Calvin_Hoy
- 2 yrs ago
- 2 replies
- 216
- Calvin Hoy2 yrs ago
- Questions
- Answered
- Answered
Chain/fullchain file contains unexpected characters
Chain file contains unexpected characters also partially in DOS format (with CRLF) While obtaining a certificate using certbot 0.28.0 the saved chain file contains additional characters at the…
- Jozsef Szilagyi
- Jozsef_Szilagyi
- 2 yrs ago
- 3 replies
- 107
- 2
- Jozsef Szilagyi2 yrs ago
- Questions
- Answered
- Answered
ACME V2 - staging vs production behaviour is different.
Currently the ACME V2 API will issue a certificate for multiple domain names/subdomain in Staging mode, but the live API will only issue a single domain + www.…
- webprofusion
- webprofusion
- 2 yrs ago
- 4 replies
- 262
- 1
- maov2 yrs ago
- Questions
- Answered
- Answered
v2 new-order failure internal error (with log)
We get an internal error message while trying to request a new certificate using acme v2. Do you have any more information on why it failed ? {"code":500,"message":"INTERNAL_SERVER_ERROR","details":…
- Jay737
- Jay737
- 2 yrs ago
- 2 replies
- 132
- Jay7372 yrs ago
- Questions
- Answered
- Answered
Buypass not sending CAA violation reports (IODEF)
Hi, In the Buypass documentation on CAA, it says that Buypass will send reports via email in IODEF format when a CAA policy violation occurs: Buypass uses iodef and will report certificate…
- Jamie Scaife
- Jamieweb
- 2 yrs ago
- 8 replies
- 196
- 2
- Jamie Scaife2 yrs ago
- Questions
- Answered
- Answered
New windows client using ACME v2 endpoint
Hi, Our app https://certifytheweb.com will shortly be releasing a new version which supports Buypass ACME v2. I wondered if you (buypass) need to be notified?…
- webprofusion
- webprofusion
- 2 yrs ago
- 1 reply
- 99
- maov2 yrs ago
- Questions
- Answered
- Answered
Support for IDN Domains
I could not find any information on buypass and IDN domains. Will domain names containing german umlauts (written in punny-code starting with xn--) work with certbot and the buypass API?…
- Georg
- Georg
- 2 yrs ago
- 5 replies
- 164
- Andriy Mahatsofficial rep2 yrs ago
- Questions
- Answered
- Answered
v2 new-order failure internal error
We get an internal error message while trying to request a new certificate using acme v2: {"code":500,"message":"INTERNAL_SERVER_ERROR","details":"HTTP 500 Internal Server Error"} I'm not sure what…
- Jay9827348
- Jay9827348
- 2 yrs ago
- 2 replies
- 103
- maov2 yrs ago
- Questions
- Answered
- Answered
Deviation from RFC8555
Hello, I am the author of uacme I've found that your ACME server returns an empty body when it responds to a request for the account URL given a key according to RFC8555 section 7.3.…
- Nicola Di Lieto
- Nicola_Di_Lieto
- 2 yrs ago
- 2 replies
- 142
- Kongssundofficial rep2 yrs ago
- Questions
- Answered
- Answered
RFC8555 section 7.3.1 compliance
Hello, With my ACMEv2 client implementation https://github.com/bruncsak/ght-acme.sh I got the following error when trying to retrieve the KID: HTTP/1.1 400 Bad Request {"type":"urn:ietf:params:acme:…
- Attila
- bruat
- 2 yrs ago
- 8 replies
- 167
- Attila2 yrs ago
- Questions
- Answered
- Answered
What's the IP of the http-01 challenge?
Hi, We're trying to install the free buypass SSL certificate using certbot on a server behind a firewall. We whitelisted buypass.com , and I was able to register the server,…
- Elie Obeid
- Elie_Obeid
- 2 yrs ago
- 1 reply
- 174
- maov2 yrs ago
- Questions
- Answered
- Answered
How to invalidate pending authorizations
Hi, I'm having trouble creating a new credential. Currently I am using buypass go ssl and when I try to generate new authentication information using certbot I get a [RATE_LIMITED] error and it does…
- Dongyeon
- Dongyeon
- 3 yrs ago
- 3 replies
- 110
- Andriy Mahatsofficial rep2 yrs ago
- Questions
- Answered
- Answered
Error: All authorizations were not finalized by the CA
I am unable to issue certificate using http-01 method from api.buypass.com . It throws following error: Waiting for verification... Cleaning up challenges All authorizations were not finalized by…
- ProK
- proK
- 3 yrs ago
- 5 replies
- 451
- Elie Obeid2 yrs ago
- Questions
- Answered
- Answered
DNS challenge: authz is pending, challenge processing even after error is present
Hi @Andriy Mahats, I've noticed the following behavior when trying DNS validation with the ACME v2 (RFC 8555) staging endpoint: in case challenges fail,…
- Felix Fontein
- Felix_Fontein
- 3 yrs ago
- 1 reply
- 163
- 1
- Andriy Mahatsofficial rep3 yrs ago
- Questions
- Answered
- Answered

1 2 3 Next

Have a question or an answer regarding GO SSL ACME?

Buypass Official Community

This is the official community of Buypass. A Root CA located in Norway.

Sign-up using free email domains have been blocked due to increased spam. https://community.forumbee.com/t/63zsyt/blocked-email-domains

Welcome to the Community!

Questions

Buypass support for RFC 8738?

Authentication after updating CAA

Rate Limits?

ACME for DV and OV certificates?

Keep the same DNS challenge string for renewals?

The conference.test.su subdomain

Support for OCSP Must-Staple

Support for verifying challenges over IPv6

Buypass is not compatible with ACME client "dehydrated"

mail and acme-client

ACME V2 error: HTTP 406 Not Acceptable

"Certificate won't be issued for more than 2 domain(s)"

Chain/fullchain file contains unexpected characters

ACME V2 - staging vs production behaviour is different.

v2 new-order failure internal error (with log)

Buypass not sending CAA violation reports (IODEF)

New windows client using ACME v2 endpoint

Support for IDN Domains

v2 new-order failure internal error

Deviation from RFC8555

RFC8555 section 7.3.1 compliance

What's the IP of the http-01 challenge?

How to invalidate pending authorizations

Error: All authorizations were not finalized by the CA

DNS challenge: authz is pending, challenge processing even after error is present

Buypass Official Community

Categories

Top contributors

Recent activity

Home

Buypass Official Community