Hi, while registerning or applying for a LE certificate with dehydrated, I’m getting this error: { “type”: “urn:ietf:params:acme:error:malformed”, “detail”: “Malformed account ID in KeyID header URL: “https://acme-staging-v02.api.letsencrypt.org/acme/acct/””, “status”: 400 } It seems to be an issue with the current v2 API of Let’s Encrypt and more specific with Dehydrated, see https://github.com/dehydrated-io/dehydrated/issues/650 2 This means that the package Dehydrated probably needs an update. IPFire package is on version 0.6.5, on git it still reads 0.6.5, but obviously a patch for this issue has been checked in. I compared the script in /usr/bin/dehydrated with the code in git , at least I tried to do so, and noticed a difference. Maybe the author did not change the version string in git/code? To test further, I’ve downloaded the current script from github and rerun the cert generation which finished OK afterwards. Thanks, Michael
Can you confirm that patching the release version with only this patch solves the problem? > https://github.com/dehydrated-io/dehydrated/commit/be13dcd454d6f56c4345f819658e31ecc30c358c
Created attachment 764 [details] Dehydrated version currently working I noticed this URL already, but could not merge the diff with IPFire's version of Dehydrated because of limited knowledge how to do. So, I've downloaded the complete script file from Github. I've attached the file I've downloaded and which I can confirm to have been properly working while applying fo a certificate. Michael
(In reply to Michael from comment #2) > So, I've downloaded the complete script file from Github. Yes I know. But it is probably not a very good idea to ship all sorts of experimental changes from upstream. > I've attached the file I've downloaded and which I can confirm to have been > properly working while applying fo a certificate. That was not the question. You can download the patch file, and then patch it as follows: > wget -O fix https://github.com/dehydrated-io/dehydrated/commit/be13dcd454d6f56c4345f819658e31ecc30c358c.patch > patch -i fix /usr/bin/dehydrated
dehydrated package has been updated from 0.6.5 to 0.7.0 and a patch for this update has been submitted to the development list. https://patchwork.ipfire.org/patch/3735/ This update includes the changes that were in the interim patch mentioned above.
https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=fef289cef78c9041615eda22180b56294b6354e2
https://blog.ipfire.org/post/ipfire-2-25-core-update-154-available-for-testing
Patch has been released with Core Update 154