acmesh-official / acmesh-official/acme.sh
Can't renew ec-384 certificate after enabling FIPS mode.
- Ngôn ngữ chính
- Shell
- Star
- 47.6k
- Fork
- 5.7k
- Merge trung bình
- 7 ngày 1 giờ
- Pull request đã merge (30 ngày)
- 16
Mô tả
On my Rocky Linux 9.5, we can no longer renew our certificates from letsencrypt after we enabled FIPS mode:
```
[Fri Apr 11 20:57:15 UTC 2025] EC key
[Fri Apr 11 20:57:15 UTC 2025] Let's try ASN1 OID
[Fri Apr 11 20:57:15 UTC 2025] ECC oid:
[Fri Apr 11 20:57:15 UTC 2025] Error creating new order.
[Fri Apr 11 20:57:15 UTC 2025] pid
[Fri Apr 11 20:57:15 UTC 2025] No need to restore nginx config, skipping.
[Fri Apr 11 20:57:15 UTC 2025] _clearupdns
[Fri Apr 11 20:57:15 UTC 2025] dns_entries
[Fri Apr 11 20:57:15 UTC 2025] Skipping dns.
[Fri Apr 11 20:57:15 UTC 2025] _on_issue_err
[Fri Apr 11 20:57:15 UTC 2025] Please add '--debug' or '--log' to see more information.
[Fri Apr 11 20:57:15 UTC 2025] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
```
This doesn't seem to be an issue with openssl ... was able to successfully generate a new key and csr locally without it barfing. Running this version:
```
# acme.sh version
https://github.com/acmesh-official/acme.sh
v3.1.1
```
I have certs that are going to expire in a couple of days... so this is urgent for me personally...
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.