ACMEv2(?): Intermediary (chain) placed in fullchain.pem twice. #321

Closed
opened 2025-12-29 01:22:37 +01:00 by adam · 2 comments
Owner

Originally created by @Eihrister on GitHub (Mar 29, 2018).

Hi!

For some reason, when issuing my wildcard certificate (ACMEv2), it appears fullchain.pem ends up with the same intermediary certificate (chain.pem) twice.

I notice ^M line -endings in the first iteration of the intermediary in fullchain.pem, which do not exist in the chain.pem. However, upon opening cert.pem, it seems the intermediary is already there, with the ^M line-endings.

I suspect that with ACMEv2, the contents of chain.pem already comes from Let's Encrypt (hence being stored in cert.pem).

Daniël

Originally created by @Eihrister on GitHub (Mar 29, 2018). Hi! For some reason, when issuing my wildcard certificate (ACMEv2), it appears fullchain.pem ends up with the same intermediary certificate (chain.pem) twice. I notice ^M line -endings in the first iteration of the intermediary in fullchain.pem, which do not exist in the chain.pem. However, upon opening cert.pem, it seems the intermediary is already there, with the ^M line-endings. I suspect that with ACMEv2, the contents of chain.pem already comes from Let's Encrypt (hence being stored in cert.pem). Daniël
adam closed this issue 2025-12-29 01:22:37 +01:00
Author
Owner

@txr13 commented on GitHub (Mar 29, 2018):

Please check your dehydrated version. This should be fixed in master a while back.

@txr13 commented on GitHub (Mar 29, 2018): Please check your dehydrated version. This should be fixed in master a while back.
Author
Owner

@Eihrister commented on GitHub (Mar 29, 2018):

Yeah, Lukas just showed me on IRC as well. I was using 0.6.1, cloned the repo to make a fix, then tested with the same 0.6.1 release on a different machine that had my hook scripts. I need more caffeine.

@Eihrister commented on GitHub (Mar 29, 2018): Yeah, Lukas just showed me on IRC as well. I was using 0.6.1, cloned the repo to make a fix, then tested with the same 0.6.1 release on a different machine that had my hook scripts. I need more caffeine.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#321