Crypt-LE icon indicating copy to clipboard operation
Crypt-LE copied to clipboard

Error: Could not finalize an order

Open michaelhuber1937 opened this issue 3 years ago • 4 comments

I am getting an error when requesting a let's encrypt certificate. Everything works fine in the process, but in the last step I am getting the message:

"Could not finalize an order."

My command is pretty straight forward:

le64.exe -domains "*.domain.com,domain.com" -email "[email protected]" -key www.domain.com.key -csr www.domain.com.csr -csr-key www.domain.com.key -crt www.dropshot.crt -generate-missing -live --export-pfx "topsecret" --handle-as dns

What am I doing wrong?

michaelhuber1937 avatar Apr 20 '21 13:04 michaelhuber1937

I'm seeing the same msg. Then it continues on with "Requesting challenge".

JustinWebDev avatar Aug 01 '21 20:08 JustinWebDev

Could you run the same command, but with --debug --debug added (as shown, added twice) and send me the output? You can redact it as you like and remove the actual domain names of course. If you do not want to have it posted here, you can use https://do-know.com/contact.html form. Thanks.

do-know avatar Aug 03 '21 06:08 do-know

Just to confirm - I just tested this on another domain with the same command line and the problem was not reproducible. So it is important to have the details (ideally the log output, redacted as you see fit in terms of the information you consider sensitive).

do-know avatar Aug 03 '21 07:08 do-know

@michaelhuber1937 how are you creating the DNS record. I was using the host exactly as shown, but figured out I had to use host = "_acme-challenge.@".

JustinWebDev avatar Aug 03 '21 23:08 JustinWebDev

Closing as outdated (additionally, the newer versions have the retry mechanism for async order finalization, which should be more robust).

do-know avatar Mar 12 '23 15:03 do-know