dehydrated does not work with DigiCert ACMEv2 API - ACCOUNT_URL problem #480

New Issue

adam · 2025-12-29T01:25:57+01:00

adam commented

2025-12-29 01:25:57 +01:00

Originally created by @colin-stubbs on GitHub (May 28, 2020).

There appears to be a problem with the way in which dehydrated builds and uses ACCOUNT_URL within init_system()

The current behaviour seems to assume Let's Encrypt specific behaviour, and does not appear to match RFC8555 behaviour description.

Regardless, dehydrated should have a way to force the URL to what an alternate ACME API may expect, given variations between RFC interpretation and actual behaviour in different ACMEv2 API implementations.

Note, correct ACCOUNT_URL seems to found/used on the very first order when the new account API endpoint was used, and it's only on subsequent requests that problems occur.

The DigiCert ACME API responds with this error,

{"detail":"No Key ID in JWS header","status":400,"type":"malformed"}

However the problem is that the account URL included in the order request is simply an empty string.

Originally created by @colin-stubbs on GitHub (May 28, 2020). There appears to be a problem with the way in which dehydrated builds and uses ACCOUNT_URL within init_system() The current behaviour seems to assume Let's Encrypt specific behaviour, and does not appear to match RFC8555 behaviour description. Regardless, dehydrated should have a way to force the URL to what an alternate ACME API may expect, given variations between RFC interpretation and actual behaviour in different ACMEv2 API implementations. Note, correct ACCOUNT_URL seems to found/used on the very first order when the new account API endpoint was used, and it's only on subsequent requests that problems occur. The DigiCert ACME API responds with this error, `{"detail":"No Key ID in JWS header","status":400,"type":"malformed"}` However the problem is that the account URL included in the order request is simply an empty string.

adam closed this issue

2025-12-29 01:25:58 +01:00

adam commented

2025-12-29 01:25:58 +01:00

@colin-stubbs commented on GitHub (May 28, 2020):

Appears to have already been fixed in dbb0ef1ce1

Yet to be incorporated to an official release however.

@colin-stubbs commented on GitHub (May 28, 2020): Appears to have already been fixed in https://github.com/dehydrated-io/dehydrated/commit/dbb0ef1ce1a93a20fe1cc532adbdf676cb14c3d3 Yet to be incorporated to an official release however.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#480