Skip to main content
Best answer by Rvdplas-NL

Solution is to create the cert from the CLI instead of the gui

3 replies

mhe
mhe
Explorer II
January 13, 2022

What error do you get?

Rvdplas-NL
Rvdplas-NLAuthor
New Member
January 13, 2022

The browser states that the certificate is not legit (thats correct because it's still a staging certificate):

 (CN) (STAGING) Artificial Apricot R3
 (O) (STAGING) Let's Encrypt

 

    mhe
    mhe
    Explorer II
    January 13, 2022

    in that case you have not adjusted "set acme-url" to the production URL

      Rvdplas-NL
      Rvdplas-NLAuthor
      New Member
      January 13, 2022

      Seems correct, but do i need to run a command to re request the certificate with the new acme-url ?

      config vpn certificate local
      edit "Test"
      set password ENC hash
      set comments "Renewed with ACME on Wed Jan 12 10:46:58 2022 (UTC)"
      set range global
      set enroll-protocol acme2
      set acme-ca-url "https://acme-v01.api.letsencrypt.org/directory"
      set acme-domain "*"
      set acme-email "*"
      set acme-renew-window 1
      next
      end 

        Bai_Ganyo
        Bai_Ganyo
        Explorer
        July 20, 2022

        Thank you for sharing the solution! 

        Rvdplas-NL
        Rvdplas-NLAuthorAnswer
        New Member
        January 16, 2022

        Solution is to create the cert from the CLI instead of the gui

          Terms & ConditionsAccessibility statement