Comments (6)
Just verified: I also doesn't work with any other certificate.
from labca.
I haven't tested it myself yet, but probably the fix is to change this line in /home/labca/labca/commander
from
docker compose exec boulder bin/admin-revoker serial-revoke --config labca/config/admin-revoker.json $serial $reasonCode 2>&1
to
docker compose exec boulder bin/admin -config labca/config/admin.json revoke-cert -serial $serial -reason $reasonCode 2>&1
from labca.
The error message changes now. It first gives a server error, an the labca log states:
2024-07-09T16:22:53.924487+00:00Z admin[1008]: 3 admin ntOk6wg [AUDIT] executing subcommand: got unacceptable revocation reason "5"
gui-1 | 2024-07-09T16:22:53.924457+00:00Z admin[1008]: 6 admin gqfPqws [AUDIT] admin tool executing a dry-run with the following arguments: "bin/admin -config labca/config/admin.json revoke-cert -serial 7fb2d308a535cc7d5453b2c40fcd2456d364 -reason 5"
from labca.
Update: hardcoding the reason "superseeded" into the command does seems to be ok, but only does a dry run:
gui-1 | 2024-07-09T16:29:07.703065+00:00Z admin[1022]: 6 admin 983jqAM [AUDIT] admin tool executing a dry-run with the following arguments: "bin/admin -config labca/config/admin.json revoke-cert -serial 7fb2d308a535cc7d5453b2c40fcd2456d364 -reason superseded"
gui-1 | 2024-07-09T16:29:07.703089+00:00Z admin[1022]: 6 admin 6MX16g0 Found 1 certificates to revoke
gui-1 | 2024-07-09T16:29:07.703847+00:00Z admin[1022]: 6 admin oN-h9wY dry-run: "serial:"7fb2d308a535cc7d5453b2c40fcd2456d364" code:4 adminName:"root""
gui-1 | 2024-07-09T16:29:07.703879+00:00Z admin[1022]: 6 admin 9_mC6gM [AUDIT] admin tool has successfully completed executing a dry-run with the following arguments: "bin/admin -config labca/config/admin.json revoke-cert -serial 7fb2d308a535cc7d5453b2c40fcd2456d364 -reason superseded"
gui-1 | 2024-07-09T16:29:07.703894+00:00Z admin[1022]: 6 admin 7tT7rAY Dry run complete. Pass -dry-run=false to mutate the database.'
Adding "-dry-run=false" to the command does the trick, but not sure if this breaks something else.
from labca.
Thanks for the info! I will have a better look when I find some time
... but not sure if this breaks something else.
I expect it will be totally fine, but I need to have a better look at it
from labca.
You are probably right, so far it seems to be totally fine, except that the revoke reason is hardwired in the command file.
from labca.
Related Issues (20)
- Error renewing certificate HOT 2
- DNS Domain , CAA Record - Guidance HOT 3
- Error when testing email HOT 4
- reduce clone time with --depth option in installer. HOT 1
- [renew] - Invalid hostname in redirect target, must end in IANA registered TLD HOT 2
- [Feature Request] Helm chart HOT 1
- Error in install last step when Signing certificate... HOT 1
- [DOCS] Probable improvement of the docs on probable errors with a specific use case HOT 2
- Rate limit hit after two requests HOT 1
- Permissions issue with boulder HOT 14
- non tld domains work? HOT 8
- [Feature Request] LabCA standalone Arm container image
- Cannot finalize the installation process - Response Code: 308 HOT 3
- Boulder container restarting - panic: opening hierarchy directory HOT 3
- `labca/entrypoint.sh` not found in `labca-boulder` provided from `ghcr.io/hakwerk/labca-boulder` HOT 1
- Add example on how to use LabCA with certbot HOT 2
- how to stop labca with root or other user HOT 1
- reverse proxy - Traefik HOT 2
- Possibility of creating multiple users for login
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from labca.