lego

lego copied to clipboard

Welcome

• [X] Yes, I've searched similar issues on GitHub and didn't find any.

How do you use lego?

Binary

Detailed Description

When I use ZeroSSL to create a certificate for an IP address, lego gives an error

2022/05/22 22:13:29 Could not obtain certificates:
	acme: error: 400 :: POST :: https://acme.zerossl.com/v2/DV90/newOrder :: urn:ietf:params:acme:error:rejectedIdentifier :: Invalid DNS identifier [<my ip address>]

here is my command

./lego --server https://acme.zerossl.com/v2/DV90 --eab --kid <kid> --hmac <hmac> --email=<email> --domains=<my ip address> --path ./ --accept-tos --http --http.port "0.0.0.0:80" run

I found that RF8738 defines IP Identifier Validation Extension，and lego seems not support it，can you add support for it?

the acme support IP SSL,but zerossl not allow request ip ssl on the acme API , so you got error

can try this https://github.com/tinkernels/zerossl-ip-cert or login zerossl.com to get it

tested it's work

Support for IP address based certificates will become relevant for all operators of encrypted DNS services due to the requirements in DDR https://datatracker.ietf.org/doc/draft-ietf-add-ddr/ (section: 4.2 Verified Discovery).

had to make new PR: visit #1838