search

ebekker / ACMESharp

An ACME client library and PowerShell client for the .NET platform (Let's Encrypt)
https://pkisharp.github.io/ACMESharp-docs/
1.21k stars 184 forks source link

What is wrong??? Can't submit certificate. #305

Closed meluvalli closed 6 years ago

meluvalli commented 6 years ago

Can't submit certificate because it's already submited.

But can't update certificate because it's not submited.

PS C:\Users\Administrator> Submit-ACMECertificate test.mydomain.com-20171025 Submit-ACMECertificate : asset file already exists At line:1 char:1

PS C:\Users\Administrator> Update-ACMECertificate test.mydomain.com-20171025 Update-ACMECertificate : Certificate has not been submitted yet; cannot update status At line:1 char:1

PS C:\Users\Administrator>

ebekker commented 6 years ago

Hmm, did you by any chance try to submit the cert earlier (the first time) but the operation didn't complete successfully or was manually aborted? It looks like the Vault might be stuck in an intermediate/inconsistent state.

ebekker commented 6 years ago

If you just try to create a brand new cert (you can reference the same Identifier (DNS name)) and submit that, does that go through?

meluvalli commented 6 years ago

I was able to resolve it by creating a whole new one. I don't know what happened though to cause this issue.

kennethtipton commented 6 years ago

In case it helps anyone else, i was getting this error even though I'm on Windows 10 Pro. If you are on a domain pc then check your default group policy and look for:

Computer Conifg > Windows Settings > Security Settings > Public Key Policies > Encrypting File System

If there is an expired certificate listed there you can just right click > create data recovery agent and select an admin account. A new certificate should be created and you can run gpupdate on your pc and re-run the 'Submit-ACMECertificate' with a new alias. Worked for me anyway.

from: martin-cdx commented on Dec 19, 2017