Does Let’s Encrypt already support issuing certificates for IP addresses?

Help
1

I saw on the Let’s Encrypt blog that certificates for IP addresses are now supported. However, when I try to request an IP certificate using acme.sh, I get the following error:

Error creating new order :: Profile "" does not permit ip type identifiers

Am I missing something in the configuration, or is there a specific profile that needs to be used?

Could anyone share a step-by-step guide or example on how to request an IP certificate using certbot or acme.sh?

Thanks in advance!

2

Yes, but you have to use the shortlived profile.

1 Like
3

I’m aware that the short-lived profile is required, but I couldn’t make it work with acme.sh.
Could someone explain the essential steps, or provide a working example using certbot?

4

Your error message seems to indicate that you're not using any profile. What command are you running?

1 Like
5

Did you see acme.sh docs here: Profile selection · acmesh-official/acme.sh Wiki · GitHub

Do you have a recent enough version of it?

2 Likes
6

I successfully solved the problem. Thank you. The key step was using --cert-profile shortlived.

7

Did you also adjust the --days value as suggested by their docs. Otherwise you will be requesting certs frequently and become rate limited by Let's Encrypt.

2 Likes
8

Thank you very much. I did not actually add this parameter.

1 Like
11

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.