getssl icon indicating copy to clipboard operation
getssl copied to clipboard

ERROR curl failed with 0 and returned ""

Open pherrera-tamu opened this issue 5 months ago • 6 comments

I have the latest client v2.49, running on Ubuntu 24.04.
I've configured GetSSL with a private_key.pem generated via acme-toolkit.py script using https://acme.enterprise.sectigo.com as the CA. When attempting to generate a certificate, I'm getting the following error:

ERROR curl "https://acme.enterprise.sectigo.com/new-nonce" failed with 0 and returned ""

I've attached debug text.

I have a working instance of GetSSL with a different CA https://acme.sectigo.com/v2/InCommonRSAOV. I don't see a significant difference in the getssl.cfg between the two instances. Ideas for debugging and solutions are appreciated.

getssl-debug.txt

pherrera-tamu avatar Jul 22 '25 20:07 pherrera-tamu

UPDATE: To make sure my EAB ID and key were good, I successfully generated a certificate using Certbot.

pherrera-tamu avatar Jul 24 '25 02:07 pherrera-tamu

Hi @pherrera-tamu

Thanks for reporting this and thinks for including the logs. It's very strange as it appears to have failed on accepting the terms of service, but I would have hoped to get an error message back if there was a problem with that request. I'll see if I can reproduce and fix.

timkimber avatar Jul 24 '25 11:07 timkimber

I think this is same as #859, which has been fixed but only in git, after the latest release.

Pablo, we should test this again with the latest getssl from git master.

adaugherity avatar Jul 24 '25 18:07 adaugherity

Thanks @adaugherity I'd noticed that the line numbers from the log file didn't match with with the current release but didn't realise that this bug has already been fixed! I'll push a new release version soon

timkimber avatar Jul 24 '25 20:07 timkimber

I ran with git master branch version with --account-id and attached output. Now I'm getting 400 error with badNonce.

debug-2.txt

pherrera-tamu avatar Jul 29 '25 20:07 pherrera-tamu

I think badNonce would be fixed by my other PR, but that's not the real problem since it appears to generate a new nonce and then retry. This is now looking like a key/credential error, but I'm pretty sure we've successfully used this key before... strange.

adaugherity avatar Jul 29 '25 21:07 adaugherity