E_ACME 400 error: jwk and kid header fields are mutually exclusive #13

New Issue

Ghost · 2019-12-06T13:12:51Z

Ghost commented

2019-12-06 13:12:51 +00:00

I sometimes get an error response to a cert_order request:

jwk and kid header fields are mutually exclusive

Any idea what the problem could be?

I don't see any other useful info in the error message, is there anything else you might require?

I sometimes get an error response to a `cert_order` request: `jwk and kid header fields are mutually exclusive` Any idea what the problem could be? I don't see any other useful info in the error message, is there anything else you might require?

Ghost commented

2020-02-05 17:47:13 +00:00

i'm also seeing this consistently

coolaj86 commented

2020-02-05 18:56:49 +00:00

Hmm... thought I had responded to this a month age.

I would LOVE to get some sort of context around when or how it happens. Also, does it self-recover (i.e. works an hour later) or do you have to delete the config folder in order to fix it?

Hmm... thought I had responded to this a month age. I would LOVE to get some sort of context around when or how it happens. Also, does it self-recover (i.e. works an hour later) or do you have to delete the config folder in order to fix it?

coolaj86 commented

2020-02-05 18:59:27 +00:00

I know that the jwk must be used when the ACME account is created (because there is no kid yet) and that the kid is used after the account is created (and you can't use the jwk).

I did look through my logic a little with hopes of finding something obvious... but I haven't found it yet.

I know that the `jwk` must be used when the ACME account is created (because there is no `kid` yet) and that the `kid` is used after the account is created (and you can't use the `jwk`). I did look through my logic a little with hopes of finding something obvious... but I haven't found it yet.

Ghost commented

2020-02-06 12:30:39 +00:00

ok i'm no longer seeing this error

I was writing my own store, manager, and http challenge modules and one of them failed silently - all good now!

Super appreciate all the work you put into building out the greenlock suite of packages, I was able to add custom subdomains (akin to github pages) to our product in less than a day!

ok i'm no longer seeing this error I was writing my own store, manager, and http challenge modules and one of them failed silently - all good now! Super appreciate all the work you put into building out the greenlock suite of packages, I was able to add custom subdomains (akin to github pages) to our product in less than a day!

Ghost commented

2020-04-05 08:50:53 +00:00

Hi,
il am seeing the error in my log but with no direct effect on the multiple domains maanged by greenlock, at least that i hav found.

with back trace:

Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error cert_order:
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: [400] jwk and kid header fields are mutually exclusive
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: code: E_ACME
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error: [400] jwk and kid header fields are mutually exclusive
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at /home/paul/git/gadael-proxy/node_modules/@root/acme/utils.js:118:8
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at runMicrotasks (<anonymous>)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at processTicksAndRejections (internal/process/task_queues.js:97:5)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at async Object.greenlock._order (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:445:23)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at async Object.greenlock._renew (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:335:9)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at async Object.greenlock.get (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:212:23)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error cert_order:
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: [400] jwk and kid header fields are mutually exclusive
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: code: E_ACME
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error: [400] jwk and kid header fields are mutually exclusive
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at /home/paul/git/gadael-proxy/node_modules/@root/acme/utils.js:118:8
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at runMicrotasks (<anonymous>)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at processTicksAndRejections (internal/process/task_queues.js:97:5)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at async Object.greenlock._order (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:445:23)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at async Object.greenlock._renew (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:335:9)
Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]:     at async Object.greenlock.get (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:212:23)

Hi, il am seeing the error in my log but with no direct effect on the multiple domains maanged by greenlock, at least that i hav found. with back trace: ``` Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error cert_order: Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: [400] jwk and kid header fields are mutually exclusive Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: code: E_ACME Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error: [400] jwk and kid header fields are mutually exclusive Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at /home/paul/git/gadael-proxy/node_modules/@root/acme/utils.js:118:8 Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at runMicrotasks (<anonymous>) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at processTicksAndRejections (internal/process/task_queues.js:97:5) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at async Object.greenlock._order (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:445:23) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at async Object.greenlock._renew (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:335:9) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at async Object.greenlock.get (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:212:23) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error cert_order: Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: [400] jwk and kid header fields are mutually exclusive Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: code: E_ACME Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: Error: [400] jwk and kid header fields are mutually exclusive Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at /home/paul/git/gadael-proxy/node_modules/@root/acme/utils.js:118:8 Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at runMicrotasks (<anonymous>) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at processTicksAndRejections (internal/process/task_queues.js:97:5) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at async Object.greenlock._order (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:445:23) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at async Object.greenlock._renew (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:335:9) Apr 05 10:32:55 ip-172-31-20-146 nodejs[17964]: at async Object.greenlock.get (/home/paul/git/gadael-proxy/node_modules/@root/greenlock/greenlock.js:212:23) ```

Sign in to join this conversation.

No Label

No Milestone

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: root/greenlock.js#13