Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Guilhem Moulin
On Sun, 05 Apr 2020 at 01:47:39 +0200, Jonas Smedegaard wrote: > lacme succesfully issed a cert! \o/ -- Guilhem. signature.asc Description: PGP signature

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Guilhem Moulin
On Sun, 05 Apr 2020 at 01:22:46 +0200, Jonas Smedegaard wrote: >> Ah, yes: The cause is that the system lack the hashes in /etc/ssl/certs. >> >> Sorry for bothering you with a bug outside of lacme - sharing these >> details only in case it might inspire you to provide clues when lacme >> runs in

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Jonas Smedegaard
Quoting Jonas Smedegaard (2020-04-05 01:13:45) > Quoting Jonas Smedegaard (2020-04-05 01:00:04) > > Quoting Guilhem Moulin (2020-04-04 20:53:16) > > > On Sat, 04 Apr 2020 at 20:18:28 +0200, Jonas Smedegaard wrote: > > > > C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 > > > > error 2 at

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Guilhem Moulin
On Sun, 05 Apr 2020 at 01:00:04 +0200, Jonas Smedegaard wrote: > Weirdly the cause seems to be that curl doesn't get the cert at all: > > debian@everton:~$ curl -s > https://acme-v02.api.letsencrypt.org/acme/cert/036c9c4c3720c2241c7f32cb5920470555db > debian@everton:~$ echo $? > 60 > > On anothe

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Jonas Smedegaard
Quoting Jonas Smedegaard (2020-04-05 01:00:04) > Quoting Guilhem Moulin (2020-04-04 20:53:16) > > On Sat, 04 Apr 2020 at 20:18:28 +0200, Jonas Smedegaard wrote: > > > C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 > > > error 2 at 1 depth lookup: unable to get issuer certificate > > > [

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Jonas Smedegaard
Quoting Guilhem Moulin (2020-04-04 20:53:16) > Control: tag -1 moreinfo > > Hi Jonas, > > On Sat, 04 Apr 2020 at 20:18:28 +0200, Jonas Smedegaard wrote: > > C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 > > error 2 at 1 depth lookup: unable to get issuer certificate > > [live] Error:

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Guilhem Moulin
Control: tag -1 moreinfo Hi Jonas, On Sat, 04 Apr 2020 at 20:18:28 +0200, Jonas Smedegaard wrote: > C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 > error 2 at 1 depth lookup: unable to get issuer certificate > [live] Error: Received invalid X.509 certificate from ACME server! This i

Bug#955765: Error: Received invalid X.509 certificate from ACME server!

2020-04-04 Thread Jonas Smedegaard
Source: lacme Version: 0.6-2 Severity: important -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, I cannot get lacme to issue a certificate :-( I run lacme-accountd from my laptop, and lacme on my server with an ssh-tunneled socket to lacme-accountd. Here's the output from lacme: Certifica