-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Closed as not planned
Description
Checklist
- Have you pulled and found the error with
jc21/nginx-proxy-manager:latestdocker image?- Yes
- Are you sure you're not using someone else's docker image?
- Yes
- Have you searched for similar issues (both open and closed)?
- Yes
Describe the bug
Gandi DNS challenge fails: Invalid sharing_id: SHARINGID.
Error: Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-4" --agree-tos --email "nico@yopyop.org" --domains "grafana.home.yopyop.org" --authenticator dns-gandi --dns-gandi-credentials "/etc/letsencrypt/credentials/credentials-4"
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Invalid sharing_id: SHARINGID.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
at ChildProcess.exithandler (node:child_process:399:12)
at ChildProcess.emit (node:events:526:28)
at maybeClose (node:internal/child_process:1092:16)
at Process.ChildProcess._handle.onexit (node:internal/child_process:302:5)
Nginx Proxy Manager Version
v2.9.18
To Reproduce
Steps to reproduce the behavior:
- Go to 'SSL Certificates'
- Add a new Certificate
- Toggle 'Use a DNS Challenge'
- Use 'Gandi Live DNS' as a provider
- Enter Credentials File Content
- Toggle the agreement button
- Click 'Save'
- See error
Expected behavior
A new Certificate is generated
Operating System
Docker compose on debian stable
Additional context
Looks like the issue is the inclusion of this line, which is actually optional and can't be filled via the web interface anyway:
# optional organization id, remove it if not used
dns_gandi_sharing_id=SHARINGID
Looking at the log file:
[9/18/2022] [2:32:28 PM] [SSL ] › ℹ info Requesting Let'sEncrypt certificates via Gandi Live DNS for Cert #4: grafana.home.<redacted>.org
[9/18/2022] [2:32:28 PM] [SSL ] › ℹ info Command: mkdir -p /etc/letsencrypt/credentials 2> /dev/null; echo '# live dns v5 api key
dns_gandi_api_key=<redacted>
# optional organization id, remove it if not used
dns_gandi_sharing_id=SHARINGID' > '/etc/letsencrypt/credentials/credentials-4' && chmod 600 '/etc/letsencrypt/credentials/credentials-4' && pip install certbot_plugin_gandi~=1.3.2 && certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-4" --agree-tos --email "<redacted>@<redacted>.org" --domains "grafana.home.<redacted>.org" --authenticator dns-gandi --dns-gandi-credentials "/etc/letsencrypt/credentials/credentials-4"
[9/18/2022] [2:32:36 PM] [Nginx ] › ℹ info Reloading Nginx
[9/18/2022] [2:32:36 PM] [Express ] › ⚠ warning Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-4" --agree-tos --email "<redacted>@<redacted>.org" --domains "grafana.home.<redacted>.org" --authenticator dns-gandi --dns-gandi-credentials "/etc/letsencrypt/credentials/credentials-4"
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Invalid sharing_id: SHARINGID.
Step 2 adds the api_key and the sharing ID when just adding the API key should suffice (especially since the webUI doesn't give us control over the content of the SHARINGID)