mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-11 22:30:44 +01:00
Can not revoke cert #86
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @bobykus on GitHub (Apr 18, 2016).
Running
/usr/local/sbin/letsencrypt.sh --cron --domain some.do --challenge http-01 --config .letsencrypt/config.sh
INFO: Using main config file .letsencrypt/config.sh
Processing some.do
While I run
/usr/local/sbin/letsencrypt.sh --revoke certs/some.do/fullchain-1459249840.pem --domain some.do --challenge http-01 --config .letsencrypt/config.sh
INFO: Using main config file .letsencrypt/config.sh
Revoking certs/some.do/fullchain-1459249840.pem
and of course then
/usr/local/sbin/letsencrypt.sh --revoke certs/some.do/fullchain-1459249840.pem-revoked --domain some.do --challenge http-01 --config .letsencrypt/config.sh
Revoking certs/domain.do/fullchain-1459249840.pem-revoked
Details:
{"type":"urn:acme:error:malformed","detail":"Certificate already revoked","status":409}
.letsencrypt/config.sh contains
BASEDIR=/location/some.do
WELLKNOWN="${BASEDIR}/.well-known/acme-challenge"
PRIVATE_KEY="${BASEDIR}/.letsencrypt/private_key.pem"
etc.
How come the site certificate is listed as revoked but I can not get new one because it valid until Jun 27?
@lukas2511 commented on GitHub (Apr 18, 2016):
letsencrypt.sh is looking for
cert.pem, which still is pointing to a valid place and seems valid, it doesn't check with the server if the certificate has been revoked.if you run the revoke command on
cert-1459249840.pem(or just delete it, or run the command with-xto force renew) it should work.