Mailing List ecs-isp@2rosenthals.com Archived Message #816

Fra: "Paul Smedley" <ecs-isp@2rosenthals.com> Full Headers
Undecoded message
Emne: Re: [eCS-ISP] Apache HTTPS
Dato: Mon, 12 Aug 2024 17:10:49 +0930
Til: eCS ISP Mailing List <ecs-isp@2rosenthals.com>

Hey Steven,

On 12/8/24 11:58, Steven Levine wrote:
In <list-10352942@2rosenthals.com>, on 07/23/24
    at 12:20 PM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

Running:

10-03-19   3:26       2,223,572    124  uacme.exe

uacme --version
uacme.exe: version 1.0.19

What's causing curl to fail here?

uacme -v  new
uacme.exe: version 1.0.19 starting on Sun, 11 Aug 2024 19:30:36 uacme.exe:
loading key from /etc/ssl/uacme/private/key.pem
uacme.exe: /etc/ssl/uacme/private/key.pem not found
uacme.exe: generating new 2048-bit RSA key
uacme.exe: key saved to /etc/ssl/uacme/private/key.pem
uacme.exe: fetching directory at
https://acme-v02.api.letsencrypt.org/directory uacme.exe: curl_get: GET
https://acme-v02.api.letsencrypt.org/directory failed: Problem with the
SSL CA cert (path? access rights?)
uacme.exe: curl_get: waiting 5 seconds before retrying
uacme.exe: curl_get: GET https://acme-v02.api.letsencrypt.org/directory
failed: Problem with the SSL CA cert (path? access rights?)

curl https://acme-v02.api.letsencrypt.org/directory
works as expected.

Am I missing a required subdirectory?

If I was to guess,  uacme is built using a  staically linked libcurl which I built locally, which doesn't look in the right spot for SSL root certificates. I should probably rebuild uacme using libcurl from rpm....

Cheers,

Paul


Abboner: Feed, Digest, Index.
Stopp abbonement
E-post til ListMaster