How to add a custom ACME supporting CA (Digicert in my case)

[smarouchoc]

The readme indicates that acme.sh supports "Any other RFC8555-compliant CA" - but I cannot find any instructions on how to go about adding one. I have configured an ACME token in my Digicert account, which then gives me a url, a KID, and an HMAC key. I can see where the URL might go in the acme.sh file, and I assume that I might need to export one or both keys to an environment variable, based on how setting up for things like Cloudflare DNS are documented. I cannot find what the variables might be named. I am specifically choosing acme.sh because of the panos integration - I have 600+ firewalls with some significant number having client VPN. I'd really like to issue the VPN certificates once a year from the cert provider I pay for, instead of having thousands of users get a new VPN certificate warning every 90 days, as would be the case if I used a free certificate service :) thanks much for any insight anyone can provide!

[Neilpang]

just add --server for the --issue command.

eg:

acme.sh. --issue  ................    --server  'https://test.my.acme.server.com/acme/v2'

[smarouchoc]

Thank you for the reply. It may be a couple weeks before I can get back in to try this, as I am in audit for work now, plus building a set and polishing off production for G&S show we do every year - 3 hours of sleep is plenty, right? :D
Seriously though, I wanted to acknowledge your help right away because of the time delay between when i can check again. I will post an update once I have tested.

[Neilpang]

if your acme server requires to register, you will need to register with --server too:

eg:

acme.sh --register-account  ...........   --server   'https://test.my.acme.server.com/acme/v2'

#then use issue:

acme.sh --issue  ................    --server  'https://test.my.acme.server.com/acme/v2'