Certbot `/renewal` files

jvanasco · June 25, 2024, 10:40pm

I have a question about the /renewal files, as I work on some tools:

1- If the directory for a certificate received a numbered suffix (e.g. example.com-0001, will there also be a dedicated file for that in the renewals directory (i.e. example.com-0001.conf) or is it supposed to reference the example.com.conf file?

2- The files have a 32 char account field, which matches with a directory. How is that value computed from the account/account-key for RSA and ECDSA?

Thanks in advance!

Osiris · June 26, 2024, 5:16am

The directory name and file name should be congruent.

I think it's just a hash.

jvanasco · June 26, 2024, 5:28pm

Thanks.

There are so many ways to hash though.

I finally found the code responsible for it:

github.com

certbot/certbot/blob/master/certbot/certbot/_internal/account.py#L71-L85


      
          # try MD5, else use MD5 in non-security mode (e.g. for FIPS systems / RHEL)
          try:
              hasher = hashlib.md5()
          except ValueError:
              # This cast + dictionary expansion is made to make mypy happy without the need of a
              # "type: ignore" directive that will also require to disable the check on useless
              # "type: ignore" directives when mypy is run on Python 3.9+.
              hasher = hashlib.new('md5', **cast(Mapping[str, Any], {"usedforsecurity": False}))
          
          hasher.update(self.key.key.public_key().public_bytes(
              encoding=serialization.Encoding.PEM,
              format=serialization.PublicFormat.SubjectPublicKeyInfo)
          )
          
          self.id = hasher.hexdigest()

system · July 26, 2024, 5:28pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
RE: Prevent -0001 -xxxx Certificate Suffixes Help	10	2729	February 22, 2019
Building a python application for certificate renewal/installation Client dev	4	1153	May 29, 2021
Certbot 1.21.0 fails with The error was: renewal config file {} is missing a required file reference Help	7	997	March 26, 2024
Certbot certonly/run and renewal parameters Client dev	6	7505	April 20, 2017
Certbot file structure: need detailed demo Server	3	4298	September 29, 2017

Certbot `/renewal` files

Related topics