Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Undefined
Fix Version/s: None
Affects Version/s: 4.17.z
Component/s: cert-manager
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
Important
Regression:
None

Target Backport Versions:
None
Target Version:
None
Release Blocker:
None
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:


We are experiencing an issue when attempting to set up ACME certificate issuance using cert-manager on OpenShift. Registering an ACME account fails with the following error message in the ClusterIssuer resource status:

> Failed to register ACME account: 400 urn:ietf:params:acme:error:malformed: Invalid HMAC Signature in the externalAccountBinding

The same request using the `certbot` works fine.

Version-Release number of selected component (if applicable):

OpenShift Container Platform 4.17.34
Cert manager 1.16.5

How reproducible:

n/a

Steps to Reproduce:

    1.
    2.
    3.

Actual results:

Expected results:

Additional info:

Assignee:: Trilok Geer

Reporter:: Vladislav Walek

Need Info From:: Trilok Geer

Contributors:: None

QA Contact:: Yuedong Wu

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2025/07/22 10:10 PM

Updated:: 2025/10/10 7:07 PM

Details

Description

Attachments

Easy Agile Planning Poker

Activity

People

Dates