Dehydrated won't work with step-ca acme server / kid does not have required prefix #443

New Issue

2025-12-29T01:25:25+01:00

adam commented

2025-12-29 01:25:25 +01:00

Originally created by @sigio on GitHub (Nov 4, 2019).

dehydrated --config config-step -x -g --signcsr some.csr

INFO: Using main config file config-step

Requesting new certificate order from CA...
ERROR: An error occurred while sending post-request to https://ca.int.cybersprint.nl/acme/acme/new-order (Status 400)

Details:
HTTP/2 400
cache-control: no-store
content-type: application/problem+json
link: https://my-internal-acme/acme/acme/directory;rel="index"
replay-nonce: YVY5Z3VoVXZNWVhTRTVIYnVZQW9uR2N3Yk1RZk03Ylg
content-length: 246
date: Mon, 04 Nov 2019 12:31:09 GMT

{"type":"urn:ietf:params:acme:error:malformed","detail":"kid does not have required prefix; expected https://my-internal-acme/acme/acme/account/, but got https://my-internal-acme/acme/acme/new-account/TJtti927Rt3fyv5LRLRhaBgfs8oppRKI"}

The server I'm talking to does with with the acme.sh client and smallstep's own acme client.

Originally created by @sigio on GitHub (Nov 4, 2019). # dehydrated --config config-step -x -g --signcsr some.csr # INFO: Using main config file config-step + Requesting new certificate order from CA... + ERROR: An error occurred while sending post-request to https://ca.int.cybersprint.nl/acme/acme/new-order (Status 400) Details: HTTP/2 400 cache-control: no-store content-type: application/problem+json link: <https://my-internal-acme/acme/acme/directory>;rel="index" replay-nonce: YVY5Z3VoVXZNWVhTRTVIYnVZQW9uR2N3Yk1RZk03Ylg content-length: 246 date: Mon, 04 Nov 2019 12:31:09 GMT {"type":"urn:ietf:params:acme:error:malformed","detail":"kid does not have required prefix; expected https://my-internal-acme/acme/acme/account/, but got https://my-internal-acme/acme/acme/new-account/TJtti927Rt3fyv5LRLRhaBgfs8oppRKI"} The server I'm talking to does with with the acme.sh client and smallstep's own acme client.

adam closed this issue

2025-12-29 01:25:25 +01:00

adam commented

2025-12-29 01:25:26 +01:00

@vidensky commented on GitHub (Feb 5, 2020):

Problems with incorrect parsing of JSON. And a few other things.

I created a modification that works, but it's not pure code. The right solution is to go to the JSON parsing solution.

dehydrated.zip

@vidensky commented on GitHub (Feb 5, 2020): Problems with incorrect parsing of JSON. And a few other things. I created a modification that works, but it's not pure code. The right solution is to go to the JSON parsing solution. [dehydrated.zip](https://github.com/dehydrated-io/dehydrated/files/4160557/dehydrated.zip)

adam commented

2025-12-29 01:25:26 +01:00