Comments (3)
Update: After further testing, it appears the issue is not the " - " in the domain-list directive.
Commenting out the domain-list:
directive in certgrinder.conf, and instead issuing certgrinder -c ~/certgrinder.conf --domain-list example.com get certificate
produces the same ssh error:
2022-05-17 19:43:20 -0600 certgrinder INFO Getting new certificate for domainset ['example.com'] ...
2022-05-17 19:43:20 -0600 certgrinder WARNING ssh: illegal option -- -
......
2022-05-17 19:43:20 -0600 certgrinder ERROR Did not get any output, expected a certificate chain in stdout from certgrinderd
The certgrinder client can login to certgrinderd server, and the error stops the ssh process before attempting to connect to the server. Any idea what the ssh error might be referring to?
from certgrinder.
Just FYI: Installed from pip, and the only directives configured in certgrinder.conf
are path:
and certgrinderd:
, everything else commented out.
from certgrinder.
And lastly, the output of debug:
2022-05-17 22:13:24 -0600 certgrinder DEBUG Certgrinder.run_certgrinderd():709: Running certgrinderd command: ['ssh', '[email protected]', '-T', '--log-level', 'DEBUG', '--acme-server-url', 'https://acme-staging-v02.api.letsencrypt.org/directory', '--preferred-chain', 'Fake_LE_Root_X1', 'get', 'certificate']
2022-05-17 22:13:24 -0600 certgrinder WARNING Certgrinder.run_certgrinderd():745: ssh: illegal option -- -
.....
2022-05-17 22:13:24 -0600 certgrinder ERROR Certgrinder.get_certificate():888: Did not get any output, expected a certificate chain in stdout from certgrinderd
from certgrinder.
Related Issues (20)
- log actions HOT 1
- Fix code to have a hooks.d folder where post renew hooks can be dropped in by ansible roles
- Support new certificate chain with two intermediates, also support selecting alternate chain HOT 1
- do something about quoting across ssh for certgrinderd command, some templating might be needed for the command, args with quotes are fucky
- 0.17.0 does not renew staging certificates when run without --staging
- "check certificate" should check existence of all certificate files
- cryptography 35.0+ support
- use https://pem.readthedocs.io/en/stable/ for parsing PEM files
- log message clarifications
- debian default syslog socket
- "show spki" outputs sha256 hashes but others exist (like sha512)
- add Dockerfiles HOT 2
- Use hash in filename HOT 1
- Fix IDNA and make some IDNA tests HOT 1
- "Unsupported access method, please file a certgrinder bug" HOT 1
- Drop certbot dependency and use py-acme instead
- Add "ping" command to check server connection without doing anything
- Do not renew OCSP response until (Next Update - This Update) / 2 has passed HOT 1
- add pidfile stuff HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from certgrinder.