ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0018661ClearOSapp-certificate-manager - Certificate Managerpublic2018-01-15 10:532018-01-15 11:45
ReporterNickH 
Assigned Touser2 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionno change required 
PlatformOSOS Version
Product Version7.4.0 
Target VersionFixed in Version7.4.0 Updates 
Summary0018661: Let's Encrypt app fails when creating certificate for multiple domains on one certificate
DescriptionIf you try to create a certificate, say for a Primary Domain imap.my_domain.com and put smtp.my_domain.com in the Other Domains box, the Webconfig fails throwing a warning:

Warning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for imap.howitts.co.uk
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.

Creating the certificate without any "Other Domains" works.

As a secondary bug, there is not an app-lets-encrypt section in the bug tracker.

And a tertiary bug is that there is no documentation.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2018-01-15 10:53NickHNew Issue
2018-01-15 11:34user2Statusnew => confirmed
2018-01-15 11:44user2Note Added: 0006991
2018-01-15 11:44user2Statusconfirmed => resolved
2018-01-15 11:44user2Fixed in Version => 7.4.0 Updates
2018-01-15 11:44user2Resolutionopen => fixed
2018-01-15 11:44user2Assigned To => user2
2018-01-15 11:45user2Resolutionfixed => no change required
2018-01-15 11:45user2Statusresolved => closed

Notes
(0006991)
user2   
2018-01-15 11:44   
The popular TLS-SNI-01 challenge for Let's Encrypt was shutdown due to security concerns - see forum post here: https://community.letsencrypt.org/t/2018-01-09-issue-with-tls-sni-01-and-shared-hosting-infrastructure/49996 [^]

We're watching closely.

> As a secondary bug, there is not an app-lets-encrypt section in the bug tracker.

This is a WikiSuite app, so bugs should be reported here: https://github.com/WikiSuite/app-lets-encrypt/issues?utf8=%E2%9C%93&q= [^]

> And a tertiary bug is that there is no documentation.

Feel free to add that to the GitHub issue tracker as well. Docs should be added to https://wikisuite.org/ [^]