j-c-m/ubnt-letsencrypt

acme.sh no longer likes to be run with sudo

joeshaw opened this issue · 4 comments

Installing newly on an Edgerouter:

$ sudo /config/scripts/renew.acme.sh -d router.example.org
[Fri Oct 18 22:35:09 EDT 2019] Stopping GUI service.
[Fri Oct 18 22:35:34 EDT 2019] Starting temporary ACME challenge service.
It seems that you are using sudo, please read this link first:
https://github.com/Neilpang/acme.sh/wiki/sudo
[Fri Oct 18 22:35:34 EDT 2019] Stopping temporary ACME challenge service.
[Fri Oct 18 22:35:35 EDT 2019] Starting GUI service.

Adding --force to the acme.sh invocation fixes it, but feels like a blunt hammer.

j-c-m commented

Seems like --force for now is the option, going to track upstream on this for a bit.

acmesh-official/acme.sh#2462
acmesh-official/acme.sh#2488

Bleh. This is especially annoying because --force also forces renewal of the cert even if it isn't time to do so. Hoping that PR gets merged soon.

j-c-m commented

Yep, fixed here by fooling the sudo detection in acme.sh.

f4ac0f1

😂 lol! thanks for that.