New-PACertificate throws error if DnsPlugin is not explicitly specified

[TiloGit]

HI,

just tried simple manual DNS like the tutorial but seems not working. here my debug:

PS C:\tools> New-PACertificate svn.mydom123.com -AcceptTOS -Contact tilos@mydom123.com -Verbose
VERBOSE: Using directory https://acme-v02.api.letsencrypt.org/directory
VERBOSE: POST https://acme-v02.api.letsencrypt.org/acme/acct/46614051 with -1-byte payload
VERBOSE: received 330-byte response of content type application/json
VERBOSE: Using account 46614051
VERBOSE: POST https://acme-v02.api.letsencrypt.org/acme/order/46614051/194759532 with -1-byte payload
VERBOSE: received 369-byte response of content type application/json
VERBOSE: Using existing order for svn.mydom123.com with status pending
Submit-ChallengeValidation : Cannot validate argument on parameter 'DnsPlugin'. The argument is null, empty, or an element of the argument collection contains
a null value. Supply a collection that does not contain any null values and then try the command again.
At C:\Users\tilos\Documents\WindowsPowerShell\Modules\Posh-ACME\Public\New-PACertificate.ps1:183 char:36
+         Submit-ChallengeValidation @chalParams
+                                    ~~~~~~~~~~~
    + CategoryInfo          : InvalidData: (:) [Submit-ChallengeValidation], ParameterBindingValidationException
    + FullyQualifiedErrorId : ParameterArgumentValidationError,Submit-ChallengeValidation

VERBOSE: POST https://acme-v02.api.letsencrypt.org/acme/order/46614051/194759532 with -1-byte payload
VERBOSE: received 369-byte response of content type application/json

[rmbolger]

Whoops! This is definitely a bug. Thanks for finding it! Give me a bit to look into it. In the mean time, explicitly specifying the plugin with -DnsPlugin Manual should work around the problem.

[TiloGit]

tried that but no luck:

PS C:\tools> New-PACertificate svn.mydom123.com -AcceptTOS -Contact tilos@mydom123.com -Plugin Manual
New-PACertificate : Cannot process argument transformation on parameter 'PluginArgs'. Cannot convert the "Manual" value of type "System.String" to type
"System.Collections.Hashtable".
At line:1 char:91
+ ... lutions.com -AcceptTOS -Contact tilos@mydom123.com -Plugin Manual
+                                                                    ~~~~~~
    + CategoryInfo          : InvalidData: (:) [New-PACertificate], ParameterBindingArgumentTransformationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,New-PACertificate
	
PS C:\tools> Get-DnsPluginHelp Manual Add

NAME
    Add-DnsTxtManual

SYNOPSIS
    Stores the TXT record to display when Save-DnsTxtManual is called.


SYNTAX
    Add-DnsTxtManual [-RecordName] <String> [-TxtValue] <String> [-ExtraParams <Object>] [<CommonParameters>]


DESCRIPTION
    This plugin requires user interaction and should not be used for any certificates that require automated renewals. Renewal operations will skip these.


RELATED LINKS

REMARKS
    To see the examples, type: "get-help Add-DnsTxtManual -examples".
    For more information, type: "get-help Add-DnsTxtManual -detailed".
    For technical information, type: "get-help Add-DnsTxtManual -full".

PS C:\tools> New-PACertificate svn.mydom123.com -AcceptTOS -Contact tilos@mydom123.com -Plugin Manual -PluginArgs
New-PACertificate : Missing an argument for parameter 'PluginArgs'. Specify a parameter of type 'System.Collections.Hashtable' and try again.
At line:1 char:98
+ ... -AcceptTOS -Contact tilos@mydom123.com -Plugin Manual -PluginArgs
+                                                               ~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (:) [New-PACertificate], ParameterBindingException
    + FullyQualifiedErrorId : MissingArgument,New-PACertificate

[rmbolger]

You typo'd the parameter name. You want -DnsPlugin, not -Plugin. The one you typed gets interpreted as -PluginArgs.

[rmbolger]

Also, it looks like this may have been broken since as far back as 2.5.0.

[rmbolger]

This should now be fixed in the next release.