Hey all, 

i cant be able to get acme-client to work in 6.3 .

i get the same error with  agreement url as
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf"; and
"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf";

their is a error on his site,
https://github.com/kristapsdz/acme-client-portable/issues/51
Does anyone know what agreement url is offically supported/works with
openbsd 6.3?

server# acme-client -vv mail.example.com   
acme-client: "agreement url" is deprecated.
acme-client: "agreement url" is deprecated.
acme-client: acme-client: acme-client:
/etc/ssl/private/mail.example.com.key: loaded RSA domain
key/etc/acme/letsencrypt-privkey.pem: loaded RSA account
key/etc/ssl/mail.example.com.crt: certificate valid: 120 days left

server# cat /etc/acme-client.conf                                       
                             
#
# $OpenBSD: acme-client.conf,v 1.4 2017/03/22 11:14:14 benno Exp $
#
authority letsencrypt {
        agreement url
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf";
#"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf";
#"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf";
        api url "https://acme-v02.api.letsencrypt.org/directory";
#"https://acme-v01.api.letsencrypt.org/directory";
        account key "/etc/acme/letsencrypt-privkey.pem"
}

authority letsencrypt-staging {
        agreement url
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf"; #
"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf";
#"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf";
        api url "https://acme-v02.api.letsencrypt.org/directory";
#"https://acme-staging.api.letsencrypt.org/directory";
        account key "/etc/acme/letsencrypt-staging-privkey.pem"
}

domain mail.example.com {
               domain key "/etc/ssl/private/mail.example.com.key"
               domain certificate "/etc/ssl/mail.example.com.crt"
               domain full chain certificate
"/etc/ssl/mail.example.com.fullchain.pem"
               sign with letsencrypt
                                       }
#                                       

Take Care
Sincerly flipchan

Reply via email to