Dehydrated won't work with step-ca acme server / kid does not have required prefix #443

Closed
opened 2025-12-29 01:25:25 +01:00 by adam · 2 comments
Owner

Originally created by @sigio on GitHub (Nov 4, 2019).

dehydrated --config config-step -x -g --signcsr some.csr

INFO: Using main config file config-step

Details:
HTTP/2 400
cache-control: no-store
content-type: application/problem+json
link: https://my-internal-acme/acme/acme/directory;rel="index"
replay-nonce: YVY5Z3VoVXZNWVhTRTVIYnVZQW9uR2N3Yk1RZk03Ylg
content-length: 246
date: Mon, 04 Nov 2019 12:31:09 GMT

{"type":"urn:ietf:params:acme:error:malformed","detail":"kid does not have required prefix; expected https://my-internal-acme/acme/acme/account/, but got https://my-internal-acme/acme/acme/new-account/TJtti927Rt3fyv5LRLRhaBgfs8oppRKI"}

The server I'm talking to does with with the acme.sh client and smallstep's own acme client.

Originally created by @sigio on GitHub (Nov 4, 2019). # dehydrated --config config-step -x -g --signcsr some.csr # INFO: Using main config file config-step + Requesting new certificate order from CA... + ERROR: An error occurred while sending post-request to https://ca.int.cybersprint.nl/acme/acme/new-order (Status 400) Details: HTTP/2 400 cache-control: no-store content-type: application/problem+json link: <https://my-internal-acme/acme/acme/directory>;rel="index" replay-nonce: YVY5Z3VoVXZNWVhTRTVIYnVZQW9uR2N3Yk1RZk03Ylg content-length: 246 date: Mon, 04 Nov 2019 12:31:09 GMT {"type":"urn:ietf:params:acme:error:malformed","detail":"kid does not have required prefix; expected https://my-internal-acme/acme/acme/account/, but got https://my-internal-acme/acme/acme/new-account/TJtti927Rt3fyv5LRLRhaBgfs8oppRKI"} The server I'm talking to does with with the acme.sh client and smallstep's own acme client.
adam closed this issue 2025-12-29 01:25:25 +01:00
Author
Owner

@vidensky commented on GitHub (Feb 5, 2020):

Problems with incorrect parsing of JSON. And a few other things.

I created a modification that works, but it's not pure code. The right solution is to go to the JSON parsing solution.

dehydrated.zip

@vidensky commented on GitHub (Feb 5, 2020): Problems with incorrect parsing of JSON. And a few other things. I created a modification that works, but it's not pure code. The right solution is to go to the JSON parsing solution. [dehydrated.zip](https://github.com/dehydrated-io/dehydrated/files/4160557/dehydrated.zip)
Author
Owner

@lukas2511 commented on GitHub (Feb 6, 2020):

Closing this for now as this seems to be purely dependent on issue #516 and/or #671.

@lukas2511 commented on GitHub (Feb 6, 2020): Closing this for now as this seems to be purely dependent on issue #516 and/or #671.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#443