certimate-go / certimate-go/certimate

[Bug] 更新证书颁发机构认证并不生效

Open
#1,319 1 comment 0 reactions 0 assignees View on GitHub
backlog bug
Dominant language
Go
Stars
9.3k
Forks
898
Avg merge
4d 5h
Merged PRs (30d)
8

Description

### Release Version / 软件版本

v0.4.24

### Description / 缺陷描述

当我google删除了原先使用的账户项目,重新创建google下项目并生成kid和hmackey之后,更新certimate下的kid和hmackey之后报错,未生效。使用sqlite3查看数据库中表acme_accounts中数据,原ca = googletrustservices的数据并未删除或者更新。当我手动删除该数据重新添加gts信息才生效。

### Steps to reproduce / 复现步骤

1. 找到google下原certimate使用的项目
2. 删除该项目(对应的原kid及hmackey会失效)
3. 新增项目重新生成kid及hmackey
4. 到certimate授权凭据-证书颁发机构-更新kid及hmackey
5. 重新执行工作流
6. 报错:failed to obtain certificate: acme: error: 401 :: POST :: https://dv.acme-v02.api.pki.goog/new-order :: urn:ietf:params:acme:error:unauthorized :: Account is revoked.

### Logs / 日志

```console

#WwIpoYH_1U3ZjXQ4tVR9W 开始
the workflow is starting
#S8HlWrQUvhrJlWH5AfOsu 申请
ready to request certificate ...
found last node output #mogmfjlkv7xi5og record
found last certificate #6iwa6cb5be041za record
re-apply, because the configuration item 'Domains' changed
acme config initialized
acmeDirUrl:
"https://dv.acme-v02.api.pki.goog/directory"
acme account initialized
[xxx.com] acme: Obtaining bundled SAN certificate
could not obtain certificate
failed to obtain certificate: acme: error: 401 :: POST :: https://dv.acme-v02.api.pki.goog/new-order :: urn:ietf:params:acme:error:unauthorized :: Account is revoked.
#CrPutlLMEFlqyWAXYuI1s 通知
ready to send notification ...
notification completed
#UpJTh_11SVCKd11S-qNoi 结束
the workflow is ending
```

### Miscellaneous / 其他

_No response_

### Contribution / 贡献代码

- [ ] I am interested in contributing a PR for this! / 我乐意为此提交代码并发起 PR!

Contributor guide

Open the contributing guide

Research direction

Start by tracing the credential-update path for the Google Trust Services account and the persistence of the acme_accounts table in SQLite. Compare updating the kid and hmackey with deleting and recreating the account; the change is done when updated credentials replace the stored account data and the workflow no longer reports Account is revoked.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, sqlite
Domain
backend, databases, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.