Hey Steven,

On 12/8/24 11:58, Steven Levine wrote:

In <list-10352942@2rosenthals.com>, on 07/23/24
    at 12:20 PM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

Running:

10-03-19   3:26       2,223,572    124  uacme.exe

uacme --version

uacme.exe: version 1.0.19

What's causing curl to fail here?

uacme -v  new

uacme.exe: version 1.0.19 starting on Sun, 11 Aug 2024 19:30:36 uacme.exe:
loading key from /etc/ssl/uacme/private/key.pem
uacme.exe: /etc/ssl/uacme/private/key.pem not found
uacme.exe: generating new 2048-bit RSA key
uacme.exe: key saved to /etc/ssl/uacme/private/key.pem
uacme.exe: fetching directory at
https://acme-v02.api.letsencrypt.org/directory uacme.exe: curl_get: GET
https://acme-v02.api.letsencrypt.org/directory failed: Problem with the
SSL CA cert (path? access rights?)
uacme.exe: curl_get: waiting 5 seconds before retrying
uacme.exe: curl_get: GET https://acme-v02.api.letsencrypt.org/directory
failed: Problem with the SSL CA cert (path? access rights?)

curl https://acme-v02.api.letsencrypt.org/directory

works as expected.

Am I missing a required subdirectory?

If I was to guess,  uacme is built using a  staically linked libcurl which I built locally, which doesn't look in the right spot for SSL root certificates. I should probably rebuild uacme using libcurl from rpm....

Cheers,

Paul


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
This message is sent to you because you are subscribed to
 the mailing list <ecs-isp@2rosenthals.com>.
To unsubscribe, E-mail to: <ecs-isp-off@2rosenthals.com>
To switch to the DIGEST mode, E-mail to <ecs-isp-digest@2rosenthals.com>
To switch to the INDEX mode, E-mail to <ecs-isp-index@2rosenthals.com>
Send administrative queries to <ecs-isp-request@2rosenthals.com>
To subscribe (new addresses), E-mail to: <ecs-isp-on@2rosenthals.com> and reply to the confirmation email.
Web archives are publicly available at: http://lists.2rosenthals.com

This list is hosted by Rosenthal & Rosenthal, LLC
P.O. Box 281, Deer Park, NY 11729-0281. Non-
electronic communications related to content
contained in these messages should be directed
to the above address. (CAN-SPAM Act of 2003)

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=