From 4628f033ae51908cd886203b392a2f89ef5f3d44 Mon Sep 17 00:00:00 2001 From: Brielle Bruns Date: Sun, 4 Feb 2018 19:34:13 -0700 Subject: [PATCH] LE disabled tls-sni-01, so switch to just tls-sni, as certbot 0.22 and later automatically fall back to http/80 for auth --- gen-unifi-cert.sh | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/gen-unifi-cert.sh b/gen-unifi-cert.sh index 54071c1..1b5048f 100755 --- a/gen-unifi-cert.sh +++ b/gen-unifi-cert.sh @@ -2,13 +2,14 @@ # Modified script from here: https://github.com/FarsetLabs/letsencrypt-helper-scripts/blob/master/letsencrypt-unifi.sh # Modified by: Brielle Bruns # Download URL: https://source.sosdg.org/brielle/lets-encrypt-scripts -# Version: 1.4 -# Last Changed: 10/23/2017 +# Version: 1.5 +# Last Changed: 02/04/2018 # 02/02/2016: Fixed some errors with key export/import, removed lame docker requirements # 02/27/2016: More verbose progress report # 03/08/2016: Add renew option, reformat code, command line options # 03/24/2016: More sanity checking, embedding cert # 10/23/2017: Apparently don't need the ace.jar parts, so disable them +# 02/04/2018: LE disabled tls-sni-01, so switch to just tls-sni, as certbot 0.22 and later automatically fall back to http/80 for auth PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" @@ -87,7 +88,7 @@ if [[ ${onlyinsert} != "yes" ]]; then ${LEBINARY} \ --server https://acme-v01.api.letsencrypt.org/directory \ --agree-tos \ - --standalone --preferred-challenges tls-sni-01 \ + --standalone --preferred-challenges tls-sni \ ${LEOPTIONS} fi