View Issue Details

IDProjectCategoryView StatusLast Update
0010022Talermerchant backendpublic2026-02-22 14:12
ReporterFlorian Dold Assigned ToBohdan Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status implementingResolutionopen 
Target Version1.8 
Summary0010022: certbot invocation fails in taler-merchant-rproxy-setup
DescriptionWhile trying to use taler-merchant-rproxy-setup, it didn't work for me (certbot could not validate the ACME challenge), and I had to resort to a manual setup. I noticed a few issues:

* When using nginx, certbot isn't using the --nginx certbot plugin. For me, this resulted in a failed cert creation, as the webroot wasn't configured to be served by nginx. (Same applies to apache: Probably better to just use the nginx plugin than trying to roll our own)

* When using "certbot certonly", we should always pass a "--cert-name", otherwise this might lead to duplicate certificates ($domain-0001) being created
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

There are no notes attached to this issue.

Issue History

Date ModifiedUsernameFieldChange
2025-05-26 16:43Florian DoldNew Issue
2025-05-26 16:43Florian DoldStatusnew => assigned
2025-05-26 16:43Florian DoldAssigned To => Bohdan
2025-05-27 18:45BohdanStatusassigned => implementing
2025-05-27 18:45BohdanTarget Version1.0 stretch goals => 1.1
2025-07-09 09:51Christian GrothoffStatusimplementing => assigned
2025-07-29 22:46Christian GrothoffTarget Version1.1 => 1.5
2026-02-22 14:00Christian GrothoffTarget Version1.5 => 1.8
2026-02-22 14:12Christian GrothoffStatusassigned => implementing