Incorrect .pem files with recent versions #343

New Issue

2025-12-29T01:23:27+01:00

adam commented

2025-12-29 01:23:27 +01:00

Originally created by @lukavia on GitHub (May 8, 2018).

I've discovered that after installing the latest version my .pem files started to contain diffrent data:
cert-xxxx...pem - contains the certificate and the chain
chain-xxxx...pem - contains the chain and a link above http://cert.int-x3.letsencrypt.org/
fullchain-xxxx...pem - contains the combination of the above. That is: the cert, the chain, the link, and the chain again.

Originally created by @lukavia on GitHub (May 8, 2018). I've discovered that after installing the latest version my .pem files started to contain diffrent data: cert-xxxx...pem - contains the certificate and the chain chain-xxxx...pem - contains the chain and a link above http://cert.int-x3.letsencrypt.org/ fullchain-xxxx...pem - contains the combination of the above. That is: the cert, the chain, the link, and the chain again.

adam closed this issue

2025-12-29 01:23:27 +01:00

adam commented

2025-12-29 01:23:27 +01:00

@txr13 commented on GitHub (May 8, 2018):

Please run “dehydrated -v” and post the resulting output.

@txr13 commented on GitHub (May 8, 2018): Please run “dehydrated -v” and post the resulting output.

adam commented

2025-12-29 01:23:27 +01:00

@lukavia commented on GitHub (May 8, 2018):

dehydrated -v
# INFO: Using main config file /etc/dehydrated/config
# INFO: Using additional config file /etc/dehydrated/conf.d/local.sh
Dehydrated by Lukas Schauer
https://dehydrated.de

Dehydrated version: 0.6.1
GIT-Revision: unknown

OS: Debian GNU/Linux 9 
Used software:
 bash: 4.4.12(1)-release
 curl: curl 7.52.1
 awk: GNU Awk 4.1.4, API: 1.1 (GNU MPFR 3.1.5, GNU MP 6.1.2)
 sed: sed (GNU sed) 4.4
 mktemp: mktemp (GNU coreutils) 8.26
 grep: grep (GNU grep) 2.27
 diff: diff (GNU diffutils) 3.5
 openssl: OpenSSL 1.1.0f  25 May 2017

@lukavia commented on GitHub (May 8, 2018): ``` dehydrated -v # INFO: Using main config file /etc/dehydrated/config # INFO: Using additional config file /etc/dehydrated/conf.d/local.sh Dehydrated by Lukas Schauer https://dehydrated.de Dehydrated version: 0.6.1 GIT-Revision: unknown OS: Debian GNU/Linux 9 Used software: bash: 4.4.12(1)-release curl: curl 7.52.1 awk: GNU Awk 4.1.4, API: 1.1 (GNU MPFR 3.1.5, GNU MP 6.1.2) sed: sed (GNU sed) 4.4 mktemp: mktemp (GNU coreutils) 8.26 grep: grep (GNU grep) 2.27 diff: diff (GNU diffutils) 3.5 openssl: OpenSSL 1.1.0f 25 May 2017 ```

adam commented

2025-12-29 01:23:28 +01:00

@txr13 commented on GitHub (May 8, 2018):

@lukavia You’re not using the latest version. Please upgrade—a fix for this has already been implemented. (Specifically, in 0.6.2.)

@txr13 commented on GitHub (May 8, 2018): @lukavia You’re not using the latest version. Please upgrade—a fix for this has already been implemented. (Specifically, in 0.6.2.)

adam commented

2025-12-29 01:23:28 +01:00

@lukavia commented on GitHub (May 9, 2018):

Since I install from debian packages I've posted a bug with them to upgrade the version https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898254

@lukavia commented on GitHub (May 9, 2018): Since I install from debian packages I've posted a bug with them to upgrade the version https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898254

adam commented

2025-12-29 01:23:28 +01:00

@mapreri commented on GitHub (May 9, 2018):

In Debian, 0.6.1-2 contains the fix (that I uploaded several days before 0.6.2 was released). Most likely you obtained that certificate with 0.6.1-1 but noticed only now.
Make sure you have installed the latest updates (which means 0.6.1-2~bpo9+1) and try re-issuing the certificate.

@mapreri commented on GitHub (May 9, 2018): In Debian, 0.6.1-2 contains the fix (that I uploaded several days before 0.6.2 was released). Most likely you obtained that certificate with 0.6.1-1 but noticed only now. Make sure you have installed the latest updates (which means `0.6.1-2~bpo9+1`) and try re-issuing the certificate.

adam commented

2025-12-29 01:23:29 +01:00