-
Limit of 5 domain names per certificate - any plan to increase it?
Hello, I wanted to try replacing Let's Encrypt with Buypass, since support for Legacy systems is important to me, and your CA is trusted since 2010-10-26,…
- Answered
-
Failed to create order: Some of the identifiers requested were rejected
So I use win-acme's to generate my SSL certificates. On their website they said that they are compatible with Buypass. I have used their certificate generator and it works fine.…
- Answered
-
Unable to validate sub-domains on prod server, only on test.
Hi I'm using DNS validation via a domain-alias. Client is acme.sh. I can validate just fine with the test server, https://api.test4.buypass.no/acme/directory. With the prod server https://api.…
- Answered
-
Deactivating an Authorization
Hi! Is it possible to deactivate a valid authorization (status = valid)? [status] => valid [contact] => Array ( [0] => mailto:xxxxxxx ) [termsOfServiceAgreed] => 1 [orders] => https://api.buypass.…
- Answered
-
DNS-01 validation and caching
Hello, I have two quick questions regarding DNS-01 validation: 1. When validating a DNS-01 challenge, does Buypass support having multiple TXT records in place for the same name/domain?…
- Answered
-
Acme clients / Usage and Attribution Guidelines
Maybe I've missed it, but I couldn't find guidelines about using buypass acme certs in an open source (agplv3) project. Is there a document similar to the Let's Encrypt guidelines?
- Answered
-
ACME/Certbot for å "samle inn og hoste" sertifikater
Heisann, Jeg har noen spørsmål rundt ACME/certbot – GO SSL. Vi har en del servere som er eksponert mot internett, og relativt mange som ikke er det, og noen fant ut at det å sette opp en…
- Answered
-
All authorizations were not finalized by the CA.
When I try to request a certificate from PROD or STAGING, it fails with this error: All authorizations were not finalized by the CA. When I use Let's Encrypt, it works with no issues.…
- Answered
-
MALFORMED_BAD_REQUEST while renew an expiring certificate
Hello. I have issue with 2 certificates which are due to expire. I can see in the letsencrypt.log the following message as a result to the following request: 2021-01-04 14:07:59,896:DEBUG:acme.…
- Answered
-
Authentication after updating CAA
I attempted to fetch a certificate and had forgotten to update CAA to include permission for buypass. Obviously this failed, but after fixing this any further attempts with the same fqdn are…
- Answered
-
Buypass support for RFC 8738?
Hi, I am using uacme, an ACME client with support for RFC 8738 which extends the ACME protocol to allow it to issue certificates for IP addresses. This currently fails with Buypass,…
- Answered
-
ACME for DV and OV certificates?
Hi! As I understand the current state of things with Buypass, only the free SSL Go certificates are supported for ACME automation. However, this doesn't seem to be a limitation of ACME,…
- Answered
-
Rate Limits?
The common errors page lists a "rateLimited": "The request exceeds a rate limit". What limits are there? Searching for "rate limit" only returns that page.
- Answered
-
List of ips to allow on firewall
Can anyone provide list of ips/network segment which is used by Buypass to authenticate http-01 challenge ? I think it would be great help as this can be white-listed on firewall/router level.
- Answered
-
Support for IDN Domains
I could not find any information on buypass and IDN domains. Will domain names containing german umlauts (written in punny-code starting with xn--) work with certbot and the buypass API?…
- Answered
-
Do you follow redirect when validate http-01 ?
I have web server that open both port 80 and 443 but always redirect http to https and it seems not work when I try to issue Buypass certificate because of this error Error, can not get domain uri.…
- Answered
-
Support for verifying challenges over IPv6
I tried to grab a certificate for a IPv6-only service but it did not work until I added a IPv4 proxy in front of it to answer the http-01 challenge. Is IPv6 going to be supported for ACME?
- Answered
-
Support for OCSP Must-Staple
Hello, Could you add OCSP Must-Staple to GO SSL ACME? Thank you :)
- Answered
-
Keep the same DNS challenge string for renewals?
Hi, we've got some internal-only sites we would like to protect, and DNS verification seems to match nicely. We do not have a nice way to restrict DNS API access to just the TXT records we need,…
- Answered
-
ACME V2 error: HTTP 406 Not Acceptable
Hi, I developed 3 ACME clients for less tech-savvy users. Two do automation on shared hosting (issue + install SSL). One of them listed on the Let's Encrypt website.…
- Answered
-
The conference.test.su subdomain
Good afternoon. I can't add the conference.test.su subdomain to the certificate. Does not work: certbot certonly --webroot -w /var/www/thttpd/ -d test.su,conference.test.su,mail.test.…
- Answered
-
Buypass is not compatible with ACME client "dehydrated"
Hi, I'm using the ACME client "dehydrated" which is also included in some major Linux distributions (e.g. Debian) and wanted to try Buypass instead of Let's Encrypt.…
- Answered
-
mail and acme-client
I am a regular user of OpenBSD, which provides an acme client named ... acme-client (sic). This client does not have an option to register, notably no mail is provided.…
- Answered
-
"Certificate won't be issued for more than 2 domain(s)"
Hello, in the information article for Buypass Go SSL it is stated that "Our ACME v2 supports up to 5 domain names in a certificate." However, I am unable to obtain a certificate with three domain…
- Answered
-
ACME V2 - staging vs production behaviour is different.
Currently the ACME V2 API will issue a certificate for multiple domain names/subdomain in Staging mode, but the live API will only issue a single domain + www.…
- Answered
Content aside
Category actions
Buypass Official Community
This is the official community of Buypass. A Root CA located in Norway.
Sign-up using free email domains have been blocked due to increased spam. https://community.forumbee.com/t/63zsyt/blocked-email-domains