Comments (6)
I have the same issue. How can I fix this?
from ansible-pki.
You could remove the installed acme-tiny
script and git repository, and set the above variable in the Ansible inventory. The next time you run debops.pki
on a host, Ansible will download an older acme-tiny
release which should work for now.
from ansible-pki.
This issue should now be fixed in the DebOps monorepo via debops/debops#250.
from ansible-pki.
@drybjed I got a different error when after I tried again...
$ cat /etc/pki/realms/realms//acme/error.log
Parsing account key...
Parsing CSR...
Found domains: rccgoha.org, www.rccgoha.org
Getting directory...
Directory found!
Registering account...
Traceback (most recent call last):
File "/usr/local/lib/pki/acme-tiny", line 197, in
main(sys.argv[1:])
File "/usr/local/lib/pki/acme-tiny", line 193, in main
signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca, disable_check=args.disable_check, directory_url=args.directory_url, contact=args.contact)
File "/usr/local/lib/pki/acme-tiny", line 111, in get_crt
account, code, acct_headers = _send_signed_request(directory['newAccount'], reg_payload, "Error registering")
TypeError: string indices must be integers
from ansible-pki.
@IsaiahO Did you remove the existing PKI realm directory entirely? Can you show the contents of /etc/pki/realms/rccgoha.org/config/realm.conf
?
from ansible-pki.
@drybjed This is now fixed. I deleted /etc/pki/realms/ and redeployed. Thank you very much.
from ansible-pki.
Related Issues (20)
- Role breaks without warning (and continues on "normally") if SAN misconfigured HOT 9
- Fail: No module named debops HOT 12
- [Security] debops.pki does not validate CSRs allowing certificate mis-issuance by compromised remote host
- tiny-acme suddenly causes errors HOT 20
- First PKI run fails to create ACME certificates HOT 4
- Changing config parameters has not effect HOT 2
- Changing pki_acme_ca does not reload the nginx server
- Improve docs visibility of `name_constraints` variable
- Remove the pain points when managing ACME certificates HOT 12
- Replaced external certificates are not copied to host HOT 1
- Failure on task: Sign certificate requests for current hosts HOT 3
- ./lib/pki-authority: line 164: declare: -g: invalid option error HOT 3
- debops.pki fails when 1 of the hosts is unreachable HOT 1
- Error every second pki run HOT 9
- KeyError: 'newAccount' when attempting to generate ACME certificate HOT 5
- Role debops.pki/env fails to resolve after Ansible 2.4 HOT 10
- No wildcard/domain in the 'domain' realm certificates HOT 2
- pki role generates invalid certificate with "permitted subtree violation"
- ing
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ansible-pki.