Codeberg/pages-server
24
386
Fork
You've already forked pages-server
55

Run without wildcards #167

Open
opened 2023年02月01日 18:45:34 +01:00 by jimafisk · 1 comment

From a previous conversation about how certs work (#165):

If you wanted to only allow custom domains, you wouldn't need a wildcard cert and you could just set ACME_API to https://acme.mock.director

However doing this throws:

2023年02月01日 17:17:21 [INFO] [mydomain.com] acme: Obtaining bundled SAN certificate
5:17PM ERR Couldn't obtain again a certificate or [mydomain.com] error="acme: error: 400 :: POST :: https://acme.mock.directory/order-plz :: urn:ietf:params:acme:error:malformed :: Key ID (kid) in JWS header missing expected URL prefix"
5:17PM ERR Couldn't renew certificate for mydomain.com: acme: error: 400 :: POST :: https://acme.mock.directory/order-plz :: urn:ietf:params:acme:error:malformed :: Key ID (kid) in JWS header missing expected URL prefix

If you try to use the default ACME_API (https://acme-v02.api.letsencrypt.org/directory), attempting to start the pages-server will throw:

you must set $ACME_ACCEPT_TERMS and $DNS_PROVIDER, unless $ACME_API is set to https://acme.mock.directory

So I don't think there currently is a way to run pages-server for custom domains only (no wildcard support). It would be nice if only $ACME_ACCEPT_TERMS was required (not $DNS_PROVIDER) when using the default ACME_API.

From a previous conversation about how certs work (https://codeberg.org/Codeberg/pages-server/issues/165): > If you wanted to only allow custom domains, you wouldn't need a wildcard cert and you could just set ACME_API to https://acme.mock.director However doing this throws: ``` 2023年02月01日 17:17:21 [INFO] [mydomain.com] acme: Obtaining bundled SAN certificate 5:17PM ERR Couldn't obtain again a certificate or [mydomain.com] error="acme: error: 400 :: POST :: https://acme.mock.directory/order-plz :: urn:ietf:params:acme:error:malformed :: Key ID (kid) in JWS header missing expected URL prefix" 5:17PM ERR Couldn't renew certificate for mydomain.com: acme: error: 400 :: POST :: https://acme.mock.directory/order-plz :: urn:ietf:params:acme:error:malformed :: Key ID (kid) in JWS header missing expected URL prefix ``` If you try to use the default `ACME_API` (https://acme-v02.api.letsencrypt.org/directory), attempting to start the pages-server will throw: ``` you must set $ACME_ACCEPT_TERMS and $DNS_PROVIDER, unless $ACME_API is set to https://acme.mock.directory ``` So I don't think there currently is a way to run pages-server for custom domains only (no wildcard support). It would be nice if only `$ACME_ACCEPT_TERMS` was required (not `$DNS_PROVIDER`) when using the default `ACME_API`.
Contributor
Copy link
would also address https://codeberg.org/Codeberg/pages-server/src/branch/main/server/database/xorm.go#L143-L151 ?
Sign in to join this conversation.
No Branch/Tag specified
main
pages
no-not-allow-for-new-users
ci_user-local-acme-service
feat/redis-caching
fix/memory-problem
v6.4
v6.3
v6.2.1
v6.2
v6.1
v6.0
v5.1
v5.0
v4.6.3
v4.6.2
v4.6.1
v4.6
v4.5
v4.4
v4.3
v4.2
v4.1
v4.0
v3.2.1
v3.2
v0.3.1
v0.3.0
v0.2.2
v0.2.1
v3.1
v3.0a
v3.0
v2.5b
v2.5a
v2.5
v2.4
v2.3
v2.2
v2.1
v2.0
v1.0_php
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Codeberg/pages-server#167
Reference in a new issue
Codeberg/pages-server
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?