-
Notifications
You must be signed in to change notification settings - Fork 731
Description
Important notices
Before you add a new report, we ask you kindly to acknowledge the following:
- I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- I have searched the existing issues, open and closed, and I'm convinced that mine is not new but closed. security/acme-client: does not deal correctly with Subject Alternate Names and nsupdate #3992
- The title contains the plugin to which this issue belongs
Describe the bug
It is not possible to specify different alias domains for each "Alt Name". ACME Wiki.
To Reproduce
- Steps to reproduce the behavior:
- Use a fresh OPNsense installation
- Install os-acme-client plugin
- Set up an ACME account, authentication method and certificate
Expected behavior
I expect that it is possible to add more than ONE Challenge Alias. This has to be connected to the corresponding Alt Name.
Additional context
@noseshimself mentioned this in his Issue #3992 but there is no solution. @fraenki mentioned to activate the "DNS Alias Mode option". This is working perfectly for only one Challenge Alias. But it's not possible to connect more than one alternative Names in the Cert with more than one Alias. This possibility is described in the ACME Wiki.
A big thank you to all the contributors and maintainers for their hard work and dedication to this project. Your continuous effort, valuable insights, and collaborative spirit are what keep this project moving forward. I truly appreciate your time and expertise!