dns-01 challenge fails with staging API v2: "Malformed account ID in KeyID header URL" #414

New Issue

adam · 2025-12-29T01:24:39+01:00

adam commented

2025-12-29 01:24:39 +01:00

Originally created by @sumpfralle on GitHub (Jun 20, 2019).

I tried to use the staging API v2 (see docs/staging.md):

CA="https://acme-staging-v02.api.letsencrypt.org/directory"

But it throws the following error:

root@example:/etc/dehydrated# dehydrated --cron --challenge dns-01
# INFO: Using main config file /etc/dehydrated/config
Processing example.org
 + Creating new directory /var/lib/dehydrated/certs/example.org ...
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting new certificate order from CA...
  + ERROR: An error occurred while sending post-request to https://acme-staging-v02.api.letsencrypt.org/acme/new-order (Status 400)

Details:
HTTP/1.1 100 Continue
Expires: Thu, 20 Jun 2019 20:53:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: application/problem+json
Content-Length: 186
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: -jz2mBcVjmPZ1f4BpwAafWE2QiOzHQXS7UVhDntlwpI
Expires: Thu, 20 Jun 2019 20:53:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 20 Jun 2019 20:53:02 GMT
Connection: close

{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Malformed account ID in KeyID header URL: \"https://acme-staging-v02.api.letsencrypt.org/acme/acct/\"",
  "status": 400
}

The issue does not occur with the staging API v1:

CA="https://acme-staging.api.letsencrypt.org/directory"

I am using dehydrated 0.6.2-2~bpo9+1 on Debian.

Thank you for your time!

Originally created by @sumpfralle on GitHub (Jun 20, 2019). I tried to use the staging API v2 (see [docs/staging.md](https://github.com/lukas2511/dehydrated/blob/master/docs/staging.md)): ``` CA="https://acme-staging-v02.api.letsencrypt.org/directory" ``` But it throws the following error: ``` root@example:/etc/dehydrated# dehydrated --cron --challenge dns-01 # INFO: Using main config file /etc/dehydrated/config Processing example.org + Creating new directory /var/lib/dehydrated/certs/example.org ... + Signing domains... + Generating private key... + Generating signing request... + Requesting new certificate order from CA... + ERROR: An error occurred while sending post-request to https://acme-staging-v02.api.letsencrypt.org/acme/new-order (Status 400) Details: HTTP/1.1 100 Continue Expires: Thu, 20 Jun 2019 20:53:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache HTTP/1.1 400 Bad Request Server: nginx Content-Type: application/problem+json Content-Length: 186 Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index" Replay-Nonce: -jz2mBcVjmPZ1f4BpwAafWE2QiOzHQXS7UVhDntlwpI Expires: Thu, 20 Jun 2019 20:53:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 20 Jun 2019 20:53:02 GMT Connection: close { "type": "urn:ietf:params:acme:error:malformed", "detail": "Malformed account ID in KeyID header URL: \"https://acme-staging-v02.api.letsencrypt.org/acme/acct/\"", "status": 400 } ``` The issue does not occur with the staging API v1: ``` CA="https://acme-staging.api.letsencrypt.org/directory" ``` I am using dehydrated 0.6.2-2~bpo9+1 on Debian. Thank you for your time!

adam closed this issue

2025-12-29 01:24:39 +01:00

adam commented

2025-12-29 01:24:40 +01:00

@sumpfralle commented on GitHub (Jun 25, 2019):

Cool - thank you!

@sumpfralle commented on GitHub (Jun 25, 2019): Cool - thank you!

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#414