From: "Paul Smedley" <ecs-isp@2rosenthals.com>
Message-ID: <e91c656c-c37a-4d8d-85f2-60d510ec795c@smedley.id.au>
Date: Mon, 12 Aug 2024 17:10:49 +0930
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [eCS-ISP] Apache HTTPS
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
References: <list-10571573@2rosenthals.com>
Content-Language: en-AU
In-Reply-To: <list-10571573@2rosenthals.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Hey Steven,

On 12/8/24 11:58, Steven Levine wrote:
> In <list-10352942@2rosenthals.com>, on 07/23/24
>     at 12:20 PM, "Massimo S." <ecs-isp@2rosenthals.com> said:
>
> Hi Massimo,
>
> Running:
>
> 10-03-19   3:26       2,223,572    124  uacme.exe
>
>> uacme --version
> uacme.exe: version 1.0.19
>
> What's causing curl to fail here?
>
>> uacme -v  new
> uacme.exe: version 1.0.19 starting on Sun, 11 Aug 2024 19:30:36 uacme.exe:
> loading key from /etc/ssl/uacme/private/key.pem
> uacme.exe: /etc/ssl/uacme/private/key.pem not found
> uacme.exe: generating new 2048-bit RSA key
> uacme.exe: key saved to /etc/ssl/uacme/private/key.pem
> uacme.exe: fetching directory at
> https://acme-v02.api.letsencrypt.org/directory uacme.exe: curl_get: GET
> https://acme-v02.api.letsencrypt.org/directory failed: Problem with the
> SSL CA cert (path? access rights?)
> uacme.exe: curl_get: waiting 5 seconds before retrying
> uacme.exe: curl_get: GET https://acme-v02.api.letsencrypt.org/directory
> failed: Problem with the SSL CA cert (path? access rights?)
>
>> curl https://acme-v02.api.letsencrypt.org/directory
> works as expected.
>
> Am I missing a required subdirectory?
>
If I was to guess,  uacme is built using a  staically linked libcurl 
which I built locally, which doesn't look in the right spot for SSL root 
certificates. I should probably rebuild uacme using libcurl from rpm....

Cheers,

Paul