Skip to content

Gandi DNS challenge fails: Invalid sharing_id: SHARINGID. #2274

@Raptime

Description

@Raptime

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    • Yes
  • Are you sure you're not using someone else's docker image?
    • Yes
  • Have you searched for similar issues (both open and closed)?
    • Yes

Describe the bug
Gandi DNS challenge fails: Invalid sharing_id: SHARINGID.

Error: Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-4" --agree-tos --email "nico@yopyop.org" --domains "grafana.home.yopyop.org" --authenticator dns-gandi --dns-gandi-credentials "/etc/letsencrypt/credentials/credentials-4"
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Invalid sharing_id: SHARINGID.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

    at ChildProcess.exithandler (node:child_process:399:12)
    at ChildProcess.emit (node:events:526:28)
    at maybeClose (node:internal/child_process:1092:16)
    at Process.ChildProcess._handle.onexit (node:internal/child_process:302:5)

Nginx Proxy Manager Version
v2.9.18

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'SSL Certificates'
  2. Add a new Certificate
  3. Toggle 'Use a DNS Challenge'
  4. Use 'Gandi Live DNS' as a provider
  5. Enter Credentials File Content
  6. Toggle the agreement button
  7. Click 'Save'
  8. See error

Expected behavior
A new Certificate is generated

Operating System
Docker compose on debian stable

Additional context
Looks like the issue is the inclusion of this line, which is actually optional and can't be filled via the web interface anyway:

# optional organization id, remove it if not used
dns_gandi_sharing_id=SHARINGID

Looking at the log file:

[9/18/2022] [2:32:28 PM] [SSL      ] › ℹ  info      Requesting Let'sEncrypt certificates via Gandi Live DNS for Cert #4: grafana.home.<redacted>.org
[9/18/2022] [2:32:28 PM] [SSL      ] › ℹ  info      Command: mkdir -p /etc/letsencrypt/credentials 2> /dev/null; echo '# live dns v5 api key
dns_gandi_api_key=<redacted>

# optional organization id, remove it if not used
dns_gandi_sharing_id=SHARINGID' > '/etc/letsencrypt/credentials/credentials-4' && chmod 600 '/etc/letsencrypt/credentials/credentials-4' && pip install certbot_plugin_gandi~=1.3.2  && certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-4" --agree-tos --email "<redacted>@<redacted>.org" --domains "grafana.home.<redacted>.org" --authenticator dns-gandi --dns-gandi-credentials "/etc/letsencrypt/credentials/credentials-4"
[9/18/2022] [2:32:36 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[9/18/2022] [2:32:36 PM] [Express  ] › ⚠  warning   Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-4" --agree-tos --email "<redacted>@<redacted>.org" --domains "grafana.home.<redacted>.org" --authenticator dns-gandi --dns-gandi-credentials "/etc/letsencrypt/credentials/credentials-4"
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Invalid sharing_id: SHARINGID.

Step 2 adds the api_key and the sharing ID when just adding the API key should suffice (especially since the webUI doesn't give us control over the content of the SHARINGID)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions