How to use ACME with Sectigo

Traefik Traefik v2 (latest)
1

Hi!

Our certificate provider is Sectigo and they offer ACME to issue certificates. With certbot I was able to issue certs.

How to configure Traefik to use Sectigo's ACME url instead of the LetsEncrypt url?

My current CLI config, but with this it's still using LetsEncrypt:

  --certificatesresolvers.sectigo \
  --certificatesresolvers.sectigo.acme.caserver="https://acme.sectigo.com/v2/OV" \
  --certificatesresolvers.sectigo.acme.email="user@example.com" \
  --certificatesresolvers.sectigo.acme.httpchallenge=true \
  --certificatesresolvers.sectigo.acme.httpchallenge.entrypoint=http \

Also, how can I configure the eab-kid and eab-hmac-key parameters?

sudo certbot certonly --apache --non-interactive --agree-tos \
--email user@example.com \
--server https://acme.sectigo.com/v2/OV \
--eab-kid EAB_KID \
--eab-hmac-key EAB_HMAC_KEY \
--domain example.com
2

Look at:
https://doc.traefik.io/traefik/https/acme/#external-account-binding

You need to put it in static configuration of traefik.

3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.