Win-acme command line

Help
1

Hi all,

I need some help using command line arguments with win-acme. I want to automate certificate creation with my own scripts, so I tried to understand the command line arguments but I'm missing some specificities.

For instance, I'm trying to create a certificate for two domains "ztb.fr" and "ztb-train.fr".

Here is the command line I'm calling :

wacs.exe --commonname *.ztb.fr --host .ztb.fr,.ztb-train.fr,ztb.fr,ztb-train.fr --store pemfiles --pemfilespath . --store pfxfile --pfxfilepath . --pfxpassword mypassword --dnsscript Scripts\myownscript.exe --validationmode dns-01 --validation script

That doesn't launch the process, I still get the main menu. When I select "M" option, I can see some of the command line parameters used as default values, but not all. For instance, the dnsscript is not taken into accound, I have to set it again. Sometimes I get a message "missing dnsscript or dnscreatescript".
Regarding the certificate creation, it defaults on the PEM option, but then it doesn't default to PFX option.

My goal is to get the PEM files AND the PFX file with a password. I DO NOT want it to try to add the scheduled task, and I DO NOT want the interactive execution, but a fully automated execution.

Someone could help me to achieve this ?

(I'm using latest version of win-acme to date)

Thanks !

2

Welcome @sierramike

I don't have an answer for your specific question. But, I have some recommendations.

The first is to switch to simple-acme from win-acme. The principal maintainer of win-acme forked win-acme and says this about simple-acme:

"Going forwards, this is the version that I will be supporting and working on. I don’t expect there to be further releases of win-acme, unless ZeroSSL chooses to continue developing that project separately for themselves."

The website for simple-acme is https://simple-acme.com/ and if no one in this forum suggests fixes for your problem use simple-acme support channels. See the Project History link at the bottom of that page to learn about the fork and support going forward.

My second recommendation is that if simple-acme isn't sufficient for the programmatic control you want you should consider using posh-acme instead. It's a Powershell based ACME Client: Home - Posh-ACME

7 Likes
3

Thank you for these recommendations Mike, I will definitely give them a try!

2 Likes