Getting a valid certificate after staging

Help
1

I'm using Let's Encrypt in Home Assistant in order to get a certificate for my HA server. I was having issues getting the certificate issued and got rate-limited, so I swapped to the staging ACME endpoint. I was able to work out what I was doing wrong and got it fixed.
Not I have staging certificates for my web app, and I can't seem to get legitimate ones, even when requesting a certificate from https://acme-v02.api.letsencrypt.org/directory.

It tells me "Certificate not yet due for renewal; no action taken."

How do I get a legit cert at this point?

2

Okay, of course I figure this out after posting about it.

Using the HA CLI, don't apt-get but apk certbot. You can then do certbot things.

by default, my keys were in /ssl/fullchain.pem and ssl/privkey.pem.
If anybody else runs into this and jumps down a 2 hour Google rabbit hole, here's the command I used to revoke my staging cert:

certbot revoke --staging --cert-path /ssl/fullchain.pem --key-path /ssl/privkey.pem

And of course, the manual:
https://eff-certbot.readthedocs.io/en/stable/using.html

3

This is one of the very vew situations where --force-renewal is a legitimate option.

4 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.