From 291b236290dc41941ab681b463994f39bb2609ac Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Mon, 6 Dec 2021 15:32:02 -0700 Subject: [PATCH] Add --preferred-chain ISRG Root X1 to fix Letsencypt working with Yealink, Polycom and other phones. --- debian/resources/letsencrypt.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/debian/resources/letsencrypt.sh b/debian/resources/letsencrypt.sh index 128d6af..1013f21 100755 --- a/debian/resources/letsencrypt.sh +++ b/debian/resources/letsencrypt.sh @@ -79,10 +79,10 @@ fi #request the certificates if [ .$wildcard_domain = ."true" ]; then - ./dehydrated --cron --domain *.$domain_name --alias $domain_alias --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge dns-01 --hook /etc/dehydrated/hook.sh + ./dehydrated --cron --domain *.$domain_name --preferred-chain "ISRG Root X1" --alias $domain_alias --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge dns-01 --hook /etc/dehydrated/hook.sh fi if [ .$wildcard_domain = ."false" ]; then - ./dehydrated --cron --alias $domain_alias --config /etc/dehydrated/config --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge http-01 + ./dehydrated --cron --alias $domain_alias --preferred-chain "ISRG Root X1" --config /etc/dehydrated/config --config /etc/dehydrated/config --out /etc/dehydrated/certs --challenge http-01 fi #make sure the nginx ssl directory exists