How to add EAB Credentials when using ZeroSSL

[easytrans]

Hi,
Following https://docs.directadmin.com/webservices/ssl/service-ssls-and-le.html I can succesfully create a server certificate using ZeroSSL.
However I would like to connect it to my ZeroSSL account using EAB Credentials (KID and HMAC key). Where can I store these credentials?

 

[zEitEr]

Hello,

I believe the registration is identified by an email address used in DirectAdmin by admin and is stored in

/usr/local/directadmin/data/.lego/accounts/acme.zerossl.com/<ADMIN_EMAIL_ACCOUNT>/account.json

and matches the one in :

grep ^email= /usr/local/directadmin/data/users/$(da a)/user.conf

 

[easytrans]

Thank you, but I don't think this is the case.
I registered an account with ZeroSSL using the admin email address, but there seems to be no relation.

When I look at the Lego options documentation on: https://go-acme.github.io/lego/usage/cli/options/index.html I see the following parameter:
--eab: Use External Account Binding for account registration. Requires --kid and --hmac.

Is there any way I can set these additional parameters?

 

[zEitEr]

Is there any way I can set these additional parameters?

You will need to copy /usr/local/directadmin/scripts/letsencrypt.sh in the folder /usr/local/directadmin/scripts/custom/ and update /usr/local/directadmin/scripts/custom/letsencrypt.sh with new flags

I believe this is the line, that you will need to update:

/usr/local/bin/lego "${args[@]}" run --no-bundle --preferred-chain="ISRG Root X1"

When using cli, you will need to explicitly run /usr/local/directadmin/scripts/custom/letsencrypt.sh, DirectAdmin binary will use the custom version of the script without a need in additional settings.