Malformed certificate

alex1962 · November 20, 2017, 11:17am

hi, on pfsense i have created certificates Lets encrypt and all ok.
now if I create any new certificate I get the following error:
register accont, already registered, account update error
on the log of pfsense write:

[Mon Nov 20 12:10:45 CET 2017] response=’{“type”:“urn:acme:error:malformed”,“detail”:“Registration key is already in use”,“status”: 409}’
[Mon Nov 20 12:10:45 CET 2017] code=‘409’
[Mon Nov 20 12:10:45 CET 2017] Already registered
[Mon Nov 20 12:10:45 CET 2017] _accUri=‘https://acme-v01.api.letsencrypt.org/acme/reg/24567849’
[Mon Nov 20 12:10:45 CET 2017] OK
[Mon Nov 20 12:10:45 CET 2017] 1:ACCOUNT_URL=‘https://acme-v01.api.letsencrypt.org/acme/reg/24567849’
[Mon Nov 20 12:10:45 CET 2017] _tos
[Mon Nov 20 12:10:45 CET 2017] Use default tos: https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf
[Mon Nov 20 12:10:45 CET 2017] AGREEMENT=‘https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf’
[Mon Nov 20 12:10:45 CET 2017] Update tos: https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf
[Mon Nov 20 12:10:45 CET 2017] url=‘https://acme-v01.api.letsencrypt.org/acme/reg/24567849’
[Mon Nov 20 12:10:45 CET 2017] payload=’{“resource”: “reg”, “agreement”: “https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf”}’
[Mon Nov 20 12:10:45 CET 2017] Use cached jwk for file: /tmp/acme/appenninoshuttle.it//ca/acme-v01.api.letsencrypt.org/account.key
[Mon Nov 20 12:10:45 CET 2017] base64 single line.
[Mon Nov 20 12:10:45 CET 2017] payload64=‘eyJyZXNvdXJjZSI6ICJyZWciLCAiYWdyZWVtZW50IjogImh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL2RvY3VtZW50cy9MRS1TQS12MS4xLjEtQXVndXN0LTEtMjAxNi5wZGYifQ’
[Mon Nov 20 12:10:45 CET 2017] _request_retry_times=‘0’
[Mon Nov 20 12:10:45 CET 2017] Use _CACHED_NONCE=‘GRIBaEysGzm9fbnrIvMmLGjdoHsk9o0HLCaXVyG2ld0’
[Mon Nov 20 12:10:45 CET 2017] nonce=‘GRIBaEysGzm9fbnrIvMmLGjdoHsk9o0HLCaXVyG2ld0’
[Mon Nov 20 12:10:45 CET 2017] protected=’{“nonce”: “GRIBaEysGzm9fbnrIvMmLGjdoHsk9o0HLCaXVyG2ld0”, “url”: “https://acme-v01.api.letsencrypt.org/acme/reg/24567849”, “alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “wkBE_qoiwy6nj1BK1T3GopFBUYXnlxADepDiZueXcrgdB5T_PJZari0NME1EK4dv5z71fS5_SngEyuDfyvFUJ1UpHSIJoMYYlI10IWZUzy1QLKWJED-VcA-ST7zFRCK7yUyaKHMlIzIGIMOVIwo-ZVAytwSO1vBAXN_ly3yvqRmyPG62y2G-R6qYo2T6vzn7lfyRuNjBBlBB5rwGXcBcEXUMyKJcFh4bT_Duvb7XAt7rslp8ytlQRAUV_b2O2wsxXlwKi94En4IVhGfLPVvJJAbyF0_tOBsnQ1IOhHHHZ1-dfZWDmwICrT8SrH1QDomttDRhbZWlKx07EqtUdkhWwx75xQOXyHfiethzDhH1lS_IAVy0n8p8SyxksS992glfNUufwkQUxpq173wBNxLG8bxmu25YBmsgimkAgG_CVbBOZrk1V-Dj-ucJTL4TqCRWHzI8yYPqQkYFbpmMhGWnOHO8XICfDEGKLNWuCTS1b2xMWviCz1NxqAscX_YVJLnqJ_y6gyd8W38jYbeUlOdyui5YntNgDgRJsI2XjblVKDgtMR6H72FCJbi711Cwa6nQTlRfHml8LjREGA7Q3n54bLKkKBrGKCTRtlyCyOMogqcD4lpLMDi7uDGrpxMpMf95mBn0p6T07SwLj29Piooco-sBomGGSQxui8B6Fi2blbM”}}’
[Mon Nov 20 12:10:45 CET 2017] base64 single line.
[Mon Nov 20 12:10:45 CET 2017] protected64=‘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’
[Mon Nov 20 12:10:45 CET 2017] base64 single line.
[Mon Nov 20 12:10:45 CET 2017] _sig_t=‘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’
[Mon Nov 20 12:10:45 CET 2017] sig=‘rqMU46KDpkdGi-JcxE9UN6SPyBEjT8FoBRiWfthv7qx4zLEVXlupDG-944oiaP-J2E_TyFsqdALfKPBJMB4t8ZGAnfOnyVGE34l5kUhhJHWSdcawNRkuaM3nBD2KGQtqJdm0S4C60seJoqMTOfCsGkSQow_xF621eJ52PhWppbMUXze5i9YZPTkEHjDWsALn-0iKIowWpW43TSge-Q93aprsiXwBA_h-CCYcyTWJmmvRnO6_FvQc8ZLheOmxbS-K2XSPvjY0SHTyRMArVUkxNPX9mzjG6HFRmqRCUcM1xu1jkiRvctFPkBS-D1YQPdT-53ZSlLEpZ4nFbsgLeGg4EkSeYiQaXxzaUpwf315ATG0n6ZffDI-c2tZ2LkTas28k69ewpxiozmjHxjWG2Y9mWu35rvcpLJUGVnlNy-JI1jCf_lon-dMJNvR_bIgXXQCYAzwfERbxWKj8Gj7o0roXEYjv_hJmrDFVtL6b8mf9SOoKr2XHwZKwE035vmF-rCEIoodPvoglCikVPXFXwiS02ajrd4yz_dxACGuVwAKTvGJ4gH9rrssnWIWimMHLdyuL5d3oXSJ2MVgESz4cnDUb8bxwhhiDDI100IEXgr4Q-U5y-1IILK1Dz_hkE7oXFpr-5iAIGzEa587fFE5G4Jj94VfwLn2wUZWKjPzDR0sCIi4’
[Mon Nov 20 12:10:45 CET 2017] body=’{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “wkBE_qoiwy6nj1BK1T3GopFBUYXnlxADepDiZueXcrgdB5T_PJZari0NME1EK4dv5z71fS5_SngEyuDfyvFUJ1UpHSIJoMYYlI10IWZUzy1QLKWJED-VcA-ST7zFRCK7yUyaKHMlIzIGIMOVIwo-ZVAytwSO1vBAXN_ly3yvqRmyPG62y2G-R6qYo2T6vzn7lfyRuNjBBlBB5rwGXcBcEXUMyKJcFh4bT_Duvb7XAt7rslp8ytlQRAUV_b2O2wsxXlwKi94En4IVhGfLPVvJJAbyF0_tOBsnQ1IOhHHHZ1-dfZWDmwICrT8SrH1QDomttDRhbZWlKx07EqtUdkhWwx75xQOXyHfiethzDhH1lS_IAVy0n8p8SyxksS992glfNUufwkQUxpq173wBNxLG8bxmu25YBmsgimkAgG_CVbBOZrk1V-Dj-ucJTL4TqCRWHzI8yYPqQkYFbpmMhGWnOHO8XICfDEGKLNWuCTS1b2xMWviCz1NxqAscX_YVJLnqJ_y6gyd8W38jYbeUlOdyui5YntNgDgRJsI2XjblVKDgtMR6H72FCJbi711Cwa6nQTlRfHml8LjREGA7Q3n54bLKkKBrGKCTRtlyCyOMogqcD4lpLMDi7uDGrpxMpMf95mBn0p6T07SwLj29Piooco-sBomGGSQxui8B6Fi2blbM”}}, “protected”: “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”, “payload”: “eyJyZXNvdXJjZSI6ICJyZWciLCAiYWdyZWVtZW50IjogImh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL2RvY3VtZW50cy9MRS1TQS12MS4xLjEtQXVndXN0LTEtMjAxNi5wZGYifQ”, “signature”: “rqMU46KDpkdGi-JcxE9UN6SPyBEjT8FoBRiWfthv7qx4zLEVXlupDG-944oiaP-J2E_TyFsqdALfKPBJMB4t8ZGAnfOnyVGE34l5kUhhJHWSdcawNRkuaM3nBD2KGQtqJdm0S4C60seJoqMTOfCsGkSQow_xF621eJ52PhWppbMUXze5i9YZPTkEHjDWsALn-0iKIowWpW43TSge-Q93aprsiXwBA_h-CCYcyTWJmmvRnO6_FvQc8ZLheOmxbS-K2XSPvjY0SHTyRMArVUkxNPX9mzjG6HFRmqRCUcM1xu1jkiRvctFPkBS-D1YQPdT-53ZSlLEpZ4nFbsgLeGg4EkSeYiQaXxzaUpwf315ATG0n6ZffDI-c2tZ2LkTas28k69ewpxiozmjHxjWG2Y9mWu35rvcpLJUGVnlNy-JI1jCf_lon-dMJNvR_bIgXXQCYAzwfERbxWKj8Gj7o0roXEYjv_hJmrDFVtL6b8mf9SOoKr2XHwZKwE035vmF-rCEIoodPvoglCikVPXFXwiS02ajrd4yz_dxACGuVwAKTvGJ4gH9rrssnWIWimMHLdyuL5d3oXSJ2MVgESz4cnDUb8bxwhhiDDI100IEXgr4Q-U5y-1IILK1Dz_hkE7oXFpr-5iAIGzEa587fFE5G4Jj94VfwLn2wUZWKjPzDR0sCIi4”}’
[Mon Nov 20 12:10:45 CET 2017] POST
[Mon Nov 20 12:10:45 CET 2017] url=‘https://acme-v01.api.letsencrypt.org/acme/reg/24567849’
[Mon Nov 20 12:10:45 CET 2017] body=’{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “wkBE_qoiwy6nj1BK1T3GopFBUYXnlxADepDiZueXcrgdB5T_PJZari0NME1EK4dv5z71fS5_SngEyuDfyvFUJ1UpHSIJoMYYlI10IWZUzy1QLKWJED-VcA-ST7zFRCK7yUyaKHMlIzIGIMOVIwo-ZVAytwSO1vBAXN_ly3yvqRmyPG62y2G-R6qYo2T6vzn7lfyRuNjBBlBB5rwGXcBcEXUMyKJcFh4bT_Duvb7XAt7rslp8ytlQRAUV_b2O2wsxXlwKi94En4IVhGfLPVvJJAbyF0_tOBsnQ1IOhHHHZ1-dfZWDmwICrT8SrH1QDomttDRhbZWlKx07EqtUdkhWwx75xQOXyHfiethzDhH1lS_IAVy0n8p8SyxksS992glfNUufwkQUxpq173wBNxLG8bxmu25YBmsgimkAgG_CVbBOZrk1V-Dj-ucJTL4TqCRWHzI8yYPqQkYFbpmMhGWnOHO8XICfDEGKLNWuCTS1b2xMWviCz1NxqAscX_YVJLnqJ_y6gyd8W38jYbeUlOdyui5YntNgDgRJsI2XjblVKDgtMR6H72FCJbi711Cwa6nQTlRfHml8LjREGA7Q3n54bLKkKBrGKCTRtlyCyOMogqcD4lpLMDi7uDGrpxMpMf95mBn0p6T07SwLj29Piooco-sBomGGSQxui8B6Fi2blbM”}}, “protected”: “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”, “payload”: “eyJyZXNvdXJjZSI6ICJyZWciLCAiYWdyZWVtZW50IjogImh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL2RvY3VtZW50cy9MRS1TQS12MS4xLjEtQXVndXN0LTEtMjAxNi5wZGYifQ”, “signature”: “rqMU46KDpkdGi-JcxE9UN6SPyBEjT8FoBRiWfthv7qx4zLEVXlupDG-944oiaP-J2E_TyFsqdALfKPBJMB4t8ZGAnfOnyVGE34l5kUhhJHWSdcawNRkuaM3nBD2KGQtqJdm0S4C60seJoqMTOfCsGkSQow_xF621eJ52PhWppbMUXze5i9YZPTkEHjDWsALn-0iKIowWpW43TSge-Q93aprsiXwBA_h-CCYcyTWJmmvRnO6_FvQc8ZLheOmxbS-K2XSPvjY0SHTyRMArVUkxNPX9mzjG6HFRmqRCUcM1xu1jkiRvctFPkBS-D1YQPdT-53ZSlLEpZ4nFbsgLeGg4EkSeYiQaXxzaUpwf315ATG0n6ZffDI-c2tZ2LkTas28k69ewpxiozmjHxjWG2Y9mWu35rvcpLJUGVnlNy-JI1jCf_lon-dMJNvR_bIgXXQCYAzwfERbxWKj8Gj7o0roXEYjv_hJmrDFVtL6b8mf9SOoKr2XHwZKwE035vmF-rCEIoodPvoglCikVPXFXwiS02ajrd4yz_dxACGuVwAKTvGJ4gH9rrssnWIWimMHLdyuL5d3oXSJ2MVgESz4cnDUb8bxwhhiDDI100IEXgr4Q-U5y-1IILK1Dz_hkE7oXFpr-5iAIGzEa587fFE5G4Jj94VfwLn2wUZWKjPzDR0sCIi4”}’
[Mon Nov 20 12:10:45 CET 2017] curl exists=0
[Mon Nov 20 12:10:45 CET 2017] wget exists=127
[Mon Nov 20 12:10:45 CET 2017] _CURL=‘curl -L --silent --dump-header /tmp/acme/appenninoshuttle.it//http.header ‘
[Mon Nov 20 12:10:46 CET 2017] _ret=‘0’
[Mon Nov 20 12:10:46 CET 2017] original=’{
“type”: “urn:acme:error:malformed”,
“detail”: “Provided agreement URL [https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf] does not match current agreement URL [https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf]”,
“status”: 400
}’
[Mon Nov 20 12:10:46 CET 2017] responseHeaders='HTTP/1.1 100 Continue
Expires: Mon, 20 Nov 2017 11:10:45 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: application/problem+json
Content-Length: 267
Boulder-Requester: 24567849
Replay-Nonce: wuDRSbOtuUWoKM9EbuWv5ODJMlpGSpCRcTZZxgD_QDM
Expires: Mon, 20 Nov 2017 11:10:46 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 20 Nov 2017 11:10:46 GMT
Connection: close

‘
[Mon Nov 20 12:10:46 CET 2017] response=’{“type”:“urn:acme:error:malformed”,“detail”:“Provided agreement URL [https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf] does not match current agreement URL [https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf]”,“status”: 400}’
[Mon Nov 20 12:10:46 CET 2017] code=‘400’
[Mon Nov 20 12:10:46 CET 2017] Update account error.
[Mon Nov 20 12:10:46 CET 2017] _on_issue_err
[Mon Nov 20 12:10:46 CET 2017] Please check log file for more details: /tmp/acme/appenninoshuttle.it/acme_issuecert.log
[Mon Nov 20 12:10:46 CET 2017] _chk_vlist

cpu · November 20, 2017, 1:23pm

Hi @alex1962,

Which ACME client are you using to try and issue your certificate?

It is hardcoding the old Let's Encrypt subscriber agreement URL. This is a bug with the ACME client and not with Let's Encrypt.

alex1962 · November 20, 2017, 1:36pm

thank you for reply
i use pfsense for issue certifictes but until a week ago it worked fine

alex1962 · November 20, 2017, 1:37pm

i use pfsense for issue certificates but until a week ago it worked fine

cpu · November 20, 2017, 1:42pm

Hi @alex1962 - You should open a bug report with the maintainers of pfsense. I'm not familiar with this project and unfortunately can't find the right place to file a bug report myself on your behalf.

When you open a bug report please let the authors know that updating the hardcoded value to the new agreement URL is not the best fix - it will only break again in the future when we change the URL. The ACME protocol supports learning the current URL at runtime so that it is never out of date and the pfsense ACME client should be updated to learn the URL that way to avoid hardcoding.

It worked until a week ago because we changed the subscriber agreement on Nov 15th.

system · December 20, 2017, 1:42pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.