search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.72k stars 4.91k forks source link

How to issue a cert with an existing private key #5283

Open ChaojuWang opened 1 week ago

ChaojuWang commented 1 week ago

The default process generates a random key to issue a new cert. How to issue a cert with an existing private key? Thanks.

github-actions[bot] commented 1 week ago

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

ninetian commented 3 days ago

If you want to issue a certificate, you must create a CSR (Certificate Signing Request) first . When creating a CSR, you will receive two files: file.csr (the certificate signing request file) and file.key (the private key file).

The CSR file is submitted to a CA (Certificate Authority) to request a new certificate. Once the CSR is submitted, the CA will issue a new certificate (usually in .crt format), which will pair with the local private key for use.

If you already have an existing private key, you can simply submit the existing CSR file to the CA to get a new certificate. the private key not update

https://github.com/acmesh-official/acme.sh/wiki/Issue-a-cert-from-existing-CSR#2-issue-a-cert-from-the-csr