Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ZeroSSL hostname cert generation fails, because it needs to different domains for domain and alt-domain #1131

Open
Linutux opened this issue Apr 25, 2023 · 1 comment

Comments

@Linutux
Copy link

Linutux commented Apr 25, 2023

Summary

I switched from LetsEncrypt to ZeroSSL. Suddenly acme.sh could not renew my hostname cert, because of two matching domains in /root/acme.sh/web1.example.de/web1.example.de.conf:

Le_Domain='web1.example.de'
Le_Alt='web1.example.de'

--

When you try to manually issue "/root/acme.sh/acme.sh --renew --domain web1.example.de --force", you get
Create new order error. Le_OrderFinalize not found. {"type":"urn:ietf:params:acme:error:rejectedIdentifier","status":400,"detail":"One or more identifiers are duplicated"}

Solution

Change

Le_Domain='web1.example.de'
Le_Alt='web1.example.de'

to

Le_Domain='web1.example.de'
Le_Alt='www.web1.example.de'

in /root/acme.sh/web1.example.de/web1.example.de.conf

Also add the corresponding DNS entry fpr www.web1.example.de

@d00p
Copy link
Member

d00p commented Apr 25, 2023

I guess someone entered the same domain in the "domain aliases for froxlor vhost" setting

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants