Netgate SG-1000 microFirewall

Author Topic: Minor error with ACME when using DNS-Hurricane Electric -method  (Read 103 times)

0 Members and 1 Guest are viewing this topic.

Offline kpa

  • Hero Member
  • *****
  • Posts: 1233
  • Karma: +138/-6
    • View Profile
Minor error with ACME when using DNS-Hurricane Electric -method
« on: February 07, 2018, 07:37:15 am »
My domain's DNS is hosted by dns.he.net and I have just started using ACME for the certificates. I noticed that the issue/renew process spits out an error at the end of the process when it's supposed to remove the TXT record from the zone at dns.he.net:

Code: [Select]
IMPORT CERT ....
update cert![Wed Feb 7 15:34:53 EET 2018] Reload success
sed: 1: "s/.*\([0-9]+','ftp\.rdn ...": RE error: parentheses not balanced
[Wed Feb 7 15:34:47 EET 2018] Could not clean (remove) up the record. Please go to HE administration interface and clean it by hand.
[Wed Feb 7 15:34:47 EET 2018] Error rm webroot api for domain:dns_he


The TXT record is still removed though so it's only a minor snag.

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21571
  • Karma: +1471/-26
    • View Profile
Re: Minor error with ACME when using DNS-Hurricane Electric -method
« Reply #1 on: February 07, 2018, 08:22:09 am »
We do not maintain that particular file, it's a part of the acme.sh project. You can report that to them at https://github.com/Neilpang/acme.sh/issues

There was a similar sed issue with dns_yandex that another one of our users reported to them yesterday, they've already fixed it in the dev branch
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline kpa

  • Hero Member
  • *****
  • Posts: 1233
  • Karma: +138/-6
    • View Profile
Re: Minor error with ACME when using DNS-Hurricane Electric -method
« Reply #2 on: February 12, 2018, 08:17:12 am »
https://github.com/Neilpang/acme.sh/issues/1252

I don't buy the response though because the error is clearly coming from dnsapi/dns_he.sh. Let's hope it's fixed in the next version.