Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sectigo #5318

Open
stonejlhu opened this issue Oct 8, 2024 · 3 comments
Open

Sectigo #5318

stonejlhu opened this issue Oct 8, 2024 · 3 comments

Comments

@stonejlhu
Copy link

stonejlhu commented Oct 8, 2024

Hello,
I am using sectigo ACME services for my certificates. I run the acme script to issue a certificate and get the following error:

[Tue 8 Oct 13:33:38 BST 2024] Using CA: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:38 BST 2024] Standalone mode.
[Tue 8 Oct 13:33:38 BST 2024] Standalone mode.
[Tue 8 Oct 13:33:38 BST 2024] Registering account: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:39 BST 2024] Account registration error: {"type":"urn:ietf:params:acme:error:externalAccountRequired","status":400,"detail":"The request must include a value for the "externalAccountBinding" field"}
[Tue 8 Oct 13:33:39 BST 2024] Please check log file for more details: /root/.acme.sh/acme.sh.log

Debug log:

[Tue 8 Oct 13:33:37 BST 2024] ACCOUNT_CONF_PATH='/root/.acme.sh/account.conf'
[Tue 8 Oct 13:33:37 BST 2024] OK
[Tue 8 Oct 13:33:37 BST 2024] 6:AUTO_UPGRADE='1'
[Tue 8 Oct 13:33:37 BST 2024] LE_WORKING_DIR='/root/.acme.sh'
[Tue 8 Oct 13:33:37 BST 2024] Running cmd: issue
[Tue 8 Oct 13:33:37 BST 2024] _main_domain='dspace.hope.ac.uk'
[Tue 8 Oct 13:33:37 BST 2024] _alt_domains='dspace1.hope.ac.uk'
[Tue 8 Oct 13:33:37 BST 2024] Using config home: /root/.acme.sh
[Tue 8 Oct 13:33:37 BST 2024] ACCOUNT_CONF_PATH='/root/.acme.sh/account.conf'
[Tue 8 Oct 13:33:37 BST 2024] ACME_DIRECTORY='https://acme.sectigo.com/v2/EV'
[Tue 8 Oct 13:33:37 BST 2024] _ACME_SERVER_HOST='acme.sectigo.com'
[Tue 8 Oct 13:33:37 BST 2024] _ACME_SERVER_PATH='v2/EV'
[Tue 8 Oct 13:33:37 BST 2024] CA_CONF='/root/.acme.sh/ca/acme.sectigo.com/v2/EV/ca.conf'
[Tue 8 Oct 13:33:37 BST 2024] DOMAIN_PATH='/root/.acme.sh/dspace.hope.ac.uk_ecc'
[Tue 8 Oct 13:33:37 BST 2024] 'no' does not contain 'dns'
[Tue 8 Oct 13:33:37 BST 2024] Le_NextRenewTime
[Tue 8 Oct 13:33:37 BST 2024] Using ACME_DIRECTORY: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:37 BST 2024] _init API for server: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:37 BST 2024] GET
[Tue 8 Oct 13:33:37 BST 2024] url='https://acme.sectigo.com/v2/EV'
[Tue 8 Oct 13:33:37 BST 2024] timeout=
[Tue 8 Oct 13:33:37 BST 2024] curl exists=0
[Tue 8 Oct 13:33:37 BST 2024] wget exists=0
[Tue 8 Oct 13:33:37 BST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[Tue 8 Oct 13:33:38 BST 2024] ret='0'
[Tue 8 Oct 13:33:38 BST 2024] _json_decode
[Tue 8 Oct 13:33:38 BST 2024] _j_str='{
"newNonce": "https://acme.sectigo.com/v2/EV/newNonce",
"newAccount": "https://acme.sectigo.com/v2/EV/newAccount",
"newOrder": "https://acme.sectigo.com/v2/EV/newOrder",
"revokeCert": "https://acme.sectigo.com/v2/EV/revokeCert",
"keyChange": "https://acme.sectigo.com/v2/EV/keyChange",
"meta": {
"termsOfService": "https://www.sectigo.com/uploads/files/Certificate-Subscriber-Agreement-2.7-click.pdf",
"caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
"externalAccountRequired": true
}
}'
[Tue 8 Oct 13:33:38 BST 2024] response='{
"newNonce": "https://acme.sectigo.com/v2/EV/newNonce",
"newAccount": "https://acme.sectigo.com/v2/EV/newAccount",
"newOrder": "https://acme.sectigo.com/v2/EV/newOrder",
"revokeCert": "https://acme.sectigo.com/v2/EV/revokeCert",
"keyChange": "https://acme.sectigo.com/v2/EV/keyChange",
"meta": {
"termsOfService": "https://www.sectigo.com/uploads/files/Certificate-Subscriber-Agreement-2.7-click.pdf",
"caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
"externalAccountRequired": true
}
}'
[Tue 8 Oct 13:33:38 BST 2024] ACME_KEY_CHANGE='https://acme.sectigo.com/v2/EV/keyChange'
[Tue 8 Oct 13:33:38 BST 2024] ACME_NEW_AUTHZ
[Tue 8 Oct 13:33:38 BST 2024] ACME_NEW_ORDER='https://acme.sectigo.com/v2/EV/newOrder'
[Tue 8 Oct 13:33:38 BST 2024] ACME_NEW_ACCOUNT='https://acme.sectigo.com/v2/EV/newAccount'
[Tue 8 Oct 13:33:38 BST 2024] ACME_REVOKE_CERT='https://acme.sectigo.com/v2/EV/revokeCert'
[Tue 8 Oct 13:33:38 BST 2024] ACME_AGREEMENT='https://www.sectigo.com/uploads/files/Certificate-Subscriber-Agreement-2.7-click.pdf'
[Tue 8 Oct 13:33:38 BST 2024] ACME_NEW_NONCE='https://acme.sectigo.com/v2/EV/newNonce'
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 1:Le_Domain='dspace.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 2:Le_Alt='dspace1.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 3:Le_Webroot='no'
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 4:Le_PreHook=''
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 5:Le_PostHook=''
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 6:Le_RenewHook=''
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 7:Le_API='https://acme.sectigo.com/v2/EV'
[Tue 8 Oct 13:33:38 BST 2024] Using CA: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:38 BST 2024] _on_before_issue
[Tue 8 Oct 13:33:38 BST 2024] _chk_main_domain='dspace.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] _chk_alt_domains='dspace1.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] 'no' contains 'no'
[Tue 8 Oct 13:33:38 BST 2024] socat exists=0
[Tue 8 Oct 13:33:38 BST 2024] Le_LocalAddress
[Tue 8 Oct 13:33:38 BST 2024] d='dspace.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] Checking for domain='dspace.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] _currentRoot='no'
[Tue 8 Oct 13:33:38 BST 2024] Standalone mode.
[Tue 8 Oct 13:33:38 BST 2024] _checkport='80'
[Tue 8 Oct 13:33:38 BST 2024] _checkaddr
[Tue 8 Oct 13:33:38 BST 2024] ss exists=0
[Tue 8 Oct 13:33:38 BST 2024] Using: ss
[Tue 8 Oct 13:33:38 BST 2024] d='dspace1.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] Checking for domain='dspace1.hope.ac.uk'
[Tue 8 Oct 13:33:38 BST 2024] _currentRoot='no'
[Tue 8 Oct 13:33:38 BST 2024] Standalone mode.
[Tue 8 Oct 13:33:38 BST 2024] APP
[Tue 8 Oct 13:33:38 BST 2024] 8:Le_HTTPPort='80'
[Tue 8 Oct 13:33:38 BST 2024] _checkport='80'
[Tue 8 Oct 13:33:38 BST 2024] _checkaddr
[Tue 8 Oct 13:33:38 BST 2024] ss exists=0
[Tue 8 Oct 13:33:38 BST 2024] Using: ss
[Tue 8 Oct 13:33:38 BST 2024] d
[Tue 8 Oct 13:33:38 BST 2024] 'no' does not contain 'apache'
[Tue 8 Oct 13:33:38 BST 2024] _saved_account_key_hash
[Tue 8 Oct 13:33:38 BST 2024] Using config home: /root/.acme.sh
[Tue 8 Oct 13:33:38 BST 2024] ACCOUNT_CONF_PATH='/root/.acme.sh/account.conf'
[Tue 8 Oct 13:33:38 BST 2024] ACME_DIRECTORY='https://acme.sectigo.com/v2/EV'
[Tue 8 Oct 13:33:38 BST 2024] _ACME_SERVER_HOST='acme.sectigo.com'
[Tue 8 Oct 13:33:38 BST 2024] _ACME_SERVER_PATH='v2/EV'
[Tue 8 Oct 13:33:38 BST 2024] CA_CONF='/root/.acme.sh/ca/acme.sectigo.com/v2/EV/ca.conf'
[Tue 8 Oct 13:33:38 BST 2024] _regAccount
[Tue 8 Oct 13:33:38 BST 2024] _init API for server: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:38 BST 2024] EC key
[Tue 8 Oct 13:33:38 BST 2024] crv='P-256'
[Tue 8 Oct 13:33:38 BST 2024] __ECC_KEY_LEN='256'
[Tue 8 Oct 13:33:38 BST 2024] pubi='7'
[Tue 8 Oct 13:33:38 BST 2024] pubj='11'
[Tue 8 Oct 13:33:38 BST 2024] pubtext='04:05:50:09:56:01:d5:35:a0:74:74:ce:28:96:af:92:b3:bc:bf:cc:7d:06:7b:d2:09:14:a7:49:ca:da:ba:77:fb:7d:7f:c1:14:de:99:b1:f3:3d:08:03:e1:7e:00:28:bf:c3:00:b3:58:26:19:31:6d:7a:20:96:93:da:5f:68:75'
[Tue 8 Oct 13:33:38 BST 2024] xlen='32'
[Tue 8 Oct 13:33:38 BST 2024] x='05:50:09:56:01:d5:35:a0:74:74:ce:28:96:af:92:b3:bc:bf:cc:7d:06:7b:d2:09:14:a7:49:ca:da:ba:77:fb'
[Tue 8 Oct 13:33:38 BST 2024] [Tue 8 Oct 13:33:38 BST 2024] xxd exists=1base64 single line.

[Tue 8 Oct 13:33:38 BST 2024] _URGLY_PRINTF
[Tue 8 Oct 13:33:38 BST 2024] xargs exists=0
[Tue 8 Oct 13:33:38 BST 2024] xargs
[Tue 8 Oct 13:33:38 BST 2024] x64='BVAJVgHVNaB0dM4olq-Ss7y_zH0Ge9IJFKdJytq6d_s'
[Tue 8 Oct 13:33:38 BST 2024] y='7d:7f:c1:14:de:99:b1:f3:3d:08:03:e1:7e:00:28:bf:c3:00:b3:58:26:19:31:6d:7a:20:96:93:da:5f:68:75'
[Tue 8 Oct 13:33:38 BST 2024] xxd exists=1
[Tue 8 Oct 13:33:38 BST 2024] base64 single line.
[Tue 8 Oct 13:33:38 BST 2024] _URGLY_PRINTF
[Tue 8 Oct 13:33:38 BST 2024] xargs exists=0
[Tue 8 Oct 13:33:38 BST 2024] xargs
[Tue 8 Oct 13:33:38 BST 2024] y64='fX_BFN6ZsfM9CAPhfgAov8MAs1gmGTFteiCWk9pfaHU'
[Tue 8 Oct 13:33:38 BST 2024] jwk='{"crv": "P-256", "kty": "EC", "x": "BVAJVgHVNaB0dM4olq-Ss7y_zH0Ge9IJFKdJytq6d_s", "y": "fX_BFN6ZsfM9CAPhfgAov8MAs1gmGTFteiCWk9pfaHU"}'
[Tue 8 Oct 13:33:38 BST 2024] JWK_HEADER='{"alg": "ES256", "jwk": {"crv": "P-256", "kty": "EC", "x": "BVAJVgHVNaB0dM4olq-Ss7y_zH0Ge9IJFKdJytq6d_s", "y": "fX_BFN6ZsfM9CAPhfgAov8MAs1gmGTFteiCWk9pfaHU"}}'
[Tue 8 Oct 13:33:38 BST 2024] _eab_id='[hidden](please add '--output-insecure' to see this value)'
[Tue 8 Oct 13:33:38 BST 2024] _eab_hmac_key='[hidden](please add '--output-insecure' to see this value)'
[Tue 8 Oct 13:33:38 BST 2024] OK
[Tue 8 Oct 13:33:38 BST 2024] 1:CA_EMAIL='stonej@xxx.xx.xxk'
[Tue 8 Oct 13:33:38 BST 2024] Registering account: https://acme.sectigo.com/v2/EV
[Tue 8 Oct 13:33:38 BST 2024] =======Sending Signed Request=======
[Tue 8 Oct 13:33:38 BST 2024] url='https://acme.sectigo.com/v2/EV/newAccount'
[Tue 8 Oct 13:33:38 BST 2024] payload='{"contact": ["mailto:stonej@xxx.xx.xx"], "termsOfServiceAgreed": true}'
[Tue 8 Oct 13:33:38 BST 2024] Use cached jwk for file: /root/.acme.sh/ca/acme.sectigo.com/v2/EV/account.key
[Tue 8 Oct 13:33:38 BST 2024] base64 single line.
[Tue 8 Oct 13:33:38 BST 2024] payload64='eyJjb250YWN0IjogWyJtYWlsdG86c3RvbmVqQGhvcGUuYWMudWsiXSwgInRlcm1zT2ZTZXJ2aWNlQWdyZWVkIjogdHJ1ZX0'
[Tue 8 Oct 13:33:38 BST 2024] _request_retry_times='1'
[Tue 8 Oct 13:33:38 BST 2024] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.sectigo.com/v2/EV/newNonce'
[Tue 8 Oct 13:33:38 BST 2024] HEAD
[Tue 8 Oct 13:33:38 BST 2024] _post_url='https://acme.sectigo.com/v2/EV/newNonce'
[Tue 8 Oct 13:33:38 BST 2024] body
[Tue 8 Oct 13:33:38 BST 2024] _postContentType='application/jose+json'
[Tue 8 Oct 13:33:38 BST 2024] curl exists=0
[Tue 8 Oct 13:33:38 BST 2024] wget exists=0
[Tue 8 Oct 13:33:38 BST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g -I '
[Tue 8 Oct 13:33:38 BST 2024] _ret='0'
[Tue 8 Oct 13:33:38 BST 2024] _headers='HTTP/2 200
server: nginx
date: Tue, 08 Oct 2024 12:33:38 GMT
content-type: application/octet-stream
replay-nonce: _BAmU4u0BmKJcdTVtozlaVf01npG37I4r1HQRgvaEhs
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: https://acme.sectigo.com/v2/EV;rel="index"
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue 8 Oct 13:33:38 BST 2024] _CACHED_NONCE='_BAmU4u0BmKJcdTVtozlaVf01npG37I4r1HQRgvaEhs'
[Tue 8 Oct 13:33:38 BST 2024] nonce='_BAmU4u0BmKJcdTVtozlaVf01npG37I4r1HQRgvaEhs'
[Tue 8 Oct 13:33:38 BST 2024] protected='{"nonce": "_BAmU4u0BmKJcdTVtozlaVf01npG37I4r1HQRgvaEhs", "url": "https://acme.sectigo.com/v2/EV/newAccount", "alg": "ES256", "jwk": {"crv": "P-256", "kty": "EC", "x": "BVAJVgHVNaB0dM4olq-Ss7y_zH0Ge9IJFKdJytq6d_s", "y": "fX_BFN6ZsfM9CAPhfgAov8MAs1gmGTFteiCWk9pfaHU"}}'
[Tue 8 Oct 13:33:38 BST 2024] base64 single line.
[Tue 8 Oct 13:33:38 BST 2024] protected64='eyJub25jZSI6ICJfQkFtVTR1MEJtS0pjZFRWdG96bGFWZjAxbnBHMzdJNHIxSFFSZ3ZhRWhzIiwgInVybCI6ICJodHRwczovL2FjbWUuc2VjdGlnby5jb20vdjIvRVYvbmV3QWNjb3VudCIsICJhbGciOiAiRVMyNTYiLCAiandrIjogeyJjcnYiOiAiUC0yNTYiLCAia3R5IjogIkVDIiwgIngiOiAiQlZBSlZnSFZOYUIwZE00b2xxLVNzN3lfekgwR2U5SUpGS2RKeXRxNmRfcyIsICJ5IjogImZYX0JGTjZac2ZNOUNBUGhmZ0FvdjhNQXMxZ21HVEZ0ZWlDV2s5cGZhSFUifX0'
[Tue 8 Oct 13:33:38 BST 2024] _signedECText=' 0:d=0 hl=2 l= 70 cons: SEQUENCE
2:d=1 hl=2 l= 33 prim: INTEGER :BBC6D27288CE3532CC5B2A45CED3467C5D622676705BF4483BA94E9F7D4B209E
37:d=1 hl=2 l= 33 prim: INTEGER :B0519A325BB07AF3F2F589AB55B9E701A94D5C4CE3E1633C9927ED3561973F23'
[Tue 8 Oct 13:33:38 BST 2024] _ec_r='BBC6D27288CE3532CC5B2A45CED3467C5D622676705BF4483BA94E9F7D4B209E'
[Tue 8 Oct 13:33:38 BST 2024] _ec_s='B0519A325BB07AF3F2F589AB55B9E701A94D5C4CE3E1633C9927ED3561973F23'
[Tue 8 Oct 13:33:38 BST 2024] xxd exists=1
[Tue 8 Oct 13:33:38 BST 2024] base64 single line.
[Tue 8 Oct 13:33:38 BST 2024] _URGLY_PRINTF
[Tue 8 Oct 13:33:38 BST 2024] xargs exists=0
[Tue 8 Oct 13:33:38 BST 2024] xargs
[Tue 8 Oct 13:33:38 BST 2024] _sig_t='u8bScojONTLMWypFztNGfF1iJnZwW/RIO6lOn31LIJ6wUZoyW7B68/L1iatVuecBqU1cTOPhYzyZJ+01YZc/Iw=='
[Tue 8 Oct 13:33:38 BST 2024] sig='u8bScojONTLMWypFztNGfF1iJnZwW_RIO6lOn31LIJ6wUZoyW7B68_L1iatVuecBqU1cTOPhYzyZJ-01YZc_Iw'
[Tue 8 Oct 13:33:38 BST 2024] body='{"protected": "eyJub25jZSI6ICJfQkFtVTR1MEJtS0pjZFRWdG96bGFWZjAxbnBHMzdJNHIxSFFSZ3ZhRWhzIiwgInVybCI6ICJodHRwczovL2FjbWUuc2VjdGlnby5jb20vdjIvRVYvbmV3QWNjb3VudCIsICJhbGciOiAiRVMyNTYiLCAiandrIjogeyJjcnYiOiAiUC0yNTYiLCAia3R5IjogIkVDIiwgIngiOiAiQlZBSlZnSFZOYUIwZE00b2xxLVNzN3lfekgwR2U5SUpGS2RKeXRxNmRfcyIsICJ5IjogImZYX0JGTjZac2ZNOUNBUGhmZ0FvdjhNQXMxZ21HVEZ0ZWlDV2s5cGZhSFUifX0", "payload": "eyJjb250YWN0IjogWyJtYWlsdG86c3RvbmVqQGhvcGUuYWMudWsiXSwgInRlcm1zT2ZTZXJ2aWNlQWdyZWVkIjogdHJ1ZX0", "signature": "u8bScojONTLMWypFztNGfF1iJnZwW_RIO6lOn31LIJ6wUZoyW7B68_L1iatVuecBqU1cTOPhYzyZJ-01YZc_Iw"}'
[Tue 8 Oct 13:33:38 BST 2024] POST
[Tue 8 Oct 13:33:38 BST 2024] _post_url='https://acme.sectigo.com/v2/EV/newAccount'
[Tue 8 Oct 13:33:38 BST 2024] body='{"protected": "eyJub25jZSI6ICJfQkFtVTR1MEJtS0pjZFRWdG96bGFWZjAxbnBHMzdJNHIxSFFSZ3ZhRWhzIiwgInVybCI6ICJodHRwczovL2FjbWUuc2VjdGlnby5jb20vdjIvRVYvbmV3QWNjb3VudCIsICJhbGciOiAiRVMyNTYiLCAiandrIjogeyJjcnYiOiAiUC0yNTYiLCAia3R5IjogIkVDIiwgIngiOiAiQlZBSlZnSFZOYUIwZE00b2xxLVNzN3lfekgwR2U5SUpGS2RKeXRxNmRfcyIsICJ5IjogImZYX0JGTjZac2ZNOUNBUGhmZ0FvdjhNQXMxZ21HVEZ0ZWlDV2s5cGZhSFUifX0", "payload": "eyJjb250YWN0IjogWyJtYWlsdG86c3RvbmVqQGhvcGUuYWMudWsiXSwgInRlcm1zT2ZTZXJ2aWNlQWdyZWVkIjogdHJ1ZX0", "signature": "u8bScojONTLMWypFztNGfF1iJnZwW_RIO6lOn31LIJ6wUZoyW7B68_L1iatVuecBqU1cTOPhYzyZJ-01YZc_Iw"}'
[Tue 8 Oct 13:33:38 BST 2024] _postContentType='application/jose+json'
[Tue 8 Oct 13:33:38 BST 2024] Http already initialized.
[Tue 8 Oct 13:33:38 BST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[Tue 8 Oct 13:33:39 BST 2024] _ret='0'
[Tue 8 Oct 13:33:39 BST 2024] responseHeaders='HTTP/2 400
server: nginx
date: Tue, 08 Oct 2024 12:33:39 GMT
content-type: application/problem+json
content-length: 159
replay-nonce: THfVwocRzvnyu0KiLe9TpHmhf9tt5PYNTqRyXGnxnmA
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: https://acme.sectigo.com/v2/EV;rel="index"
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue 8 Oct 13:33:39 BST 2024] code='400'
[Tue 8 Oct 13:33:39 BST 2024] original='{"type":"urn:ietf:params:acme:error:externalAccountRequired","status":400,"detail":"The request must include a value for the "externalAccountBinding" field"}'
[Tue 8 Oct 13:33:39 BST 2024] response='{"type":"urn:ietf:params:acme:error:externalAccountRequired","status":400,"detail":"The request must include a value for the "externalAccountBinding" field"}'
[Tue 8 Oct 13:33:39 BST 2024] Account registration error: {"type":"urn:ietf:params:acme:error:externalAccountRequired","status":400,"detail":"The request must include a value for the "externalAccountBinding" field"}
[Tue 8 Oct 13:33:39 BST 2024] _on_issue_err
[Tue 8 Oct 13:33:39 BST 2024] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Tue 8 Oct 13:33:39 BST 2024] _chk_vlist

Copy link

github-actions bot commented Oct 8, 2024

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

@szhu25
Copy link
Contributor

szhu25 commented Oct 11, 2024

Sectigo's ACME API requires EAB in order to register. Have you obtained any EAB credentials from Sectigo and registered your account on acme.sh using EAB?

If not, you could follow this guide: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA#1b-with-eab-credentials with modified parameters on the ACME Server and URI (I believe you have that, according to your output) to register your EAB credentials with Sectigo.

acme.sh --register-account --server https://acme.sectigo.com/v2/EV --eab-kid xxxxxxxxxxxx --eab-hmac-key xxxxxxxxx

Please follow up on this issue if you are unable to register for an account.

@makeaweli
Copy link

Sectigo's ACME API requires EAB in order to register.

@szhu25 your code example worked for me with Sectigo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants