|
This article describes that, when the below command is executed, it provides the necessary debugs, and the error message is as follows.
It will fetch the ACME client's full status log for a given CN domain. It will show the below error message as it is unable to communicate with LetsEncrypt servers.
FortiGate # diag sys acme status-full connect.myorganization.com
Error (<Public_IP>: Fetching http://connect.myorganization.com/.well-known/acme-challenge/<hash>: Timeout during connect (likely firewall problem)) on Thu Nov 24 20:45:12 2022 (UTC)
Below is the associated ACME protocol and certificate configuration used:
# config system acme
set store-passphrase ENC ####Hashed Password####
set url "https://acme-v02.api.letsencrypt.org/acme/acct/xxxxxxx"
set ca_url "https://acme-v02.api.letsencrypt.org/directory"
set email "itops@myorganization.com"
set privatekey "-----BEGIN ENCRYPTED PRIVATE KEY----- ####Hashed Private Key#### -----END ENCRYPTED PRIVATE KEY-----"
next
end
end
# config vpn certificate ca
edit "Connect"
set password ENC ####Hashed Password#####
set comments " "
set private-key "-----BEGIN ENCRYPTED PRIVATE KEY----- ####Hashed Private Key##### -----END ENCRYPTED PRIVATE KEY-----"
set certificate "-----BEGIN CERTIFICATE-----
####Hashed Certificate#####
-----END CERTIFICATE-----"
set range global
set enroll-protocol acme2
set acme-domain "connect.myorganization.com"
set acme-email "itops@myorganization.com"
next
end
|
