Different Acme Endpoint issue

[rahuljha28]

I am unable to issue certificate with different end point with EAB credentials, it works fine with winacme certbot and other agents.

Error message is bad request, that means it is able to communicate with Acme server with EAB keys but unable to issue certicate to extra properties in CSR, how do i change the properties.

[rahuljha28]

i got this log, please help

2025-07-23T15:17:29Z [Error] c8dc6c9cba534f74bb0518c4ede36a2b: Function 'IssueCertificate (Orchestrator)' failed with an error. Reason: Microsoft.Azure.WebJobs.Extensions.DurableTask.FunctionFailedException
at Microsoft.Azure.WebJobs.Extensions.DurableTask.DurableOrchestrationContext.CallDurableTaskFunctionAsync[TResult](String functionName, FunctionType functionType, Boolean oneWay, String instanceId, String operation, RetryOptions retryOptions, Object input, Nullable1 scheduledTimeUtc) in /_/src/WebJobs.Extensions.DurableTask/ContextImplementations/DurableOrchestrationContext.cs:line 769 at KeyVault.Acmebot.Functions.SharedOrchestrator.IssueCertificate(IDurableOrchestrationContext context) in /home/runner/work/keyvault-acmebot/keyvault-acmebot/KeyVault.Acmebot/Functions/SharedOrchestrator.cs:line 51 at Microsoft.Azure.WebJobs.Host.Executors.VoidTaskMethodInvoker2.InvokeAsync(TReflected instance, Object[] arguments) in D:\a_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\VoidTaskMethodInvoker.cs:line 20
at Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker2.InvokeAsync(Object instance, Object[] arguments) in D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionInvoker.cs:line 53 at Microsoft.Azure.WebJobs.Extensions.DurableTask.TaskOrchestrationShim.InvokeUserCodeAndHandleResults(RegisteredFunctionInfo orchestratorInfo, OrchestrationContext innerContext) in /_/src/WebJobs.Extensions.DurableTask/Listener/TaskOrchestrationShim.cs:line 148. IsReplay: False. State: Failed. RuntimeStatus: Failed. HubName: funcserverlessuicb. AppName: func-serverless-uicb. SlotName: Production. ExtensionVersion: 3.2.0. SequenceNumber: 59. TaskEventId: -1 2025-07-23T15:17:29Z [Error] Executed 'IssueCertificate' (Failed, Id=935dcb7e-51d1-4973-a613-c4ffb6d17dfd, Duration=2ms) 2025-07-23T15:17:29Z [Information] c8dc6c9cba534f74bb0518c4ede36a2b: Orchestration 'IssueCertificate' awaited and scheduled 1 durable operation(s). 2025-07-23T15:17:29Z [Information] c8dc6c9cba534f74bb0518c4ede36a2b: Orchestration completed with a 'Failed' status and 2521 bytes of output. Details: {"$type":"Microsoft.Azure.WebJobs.Extensions.DurableTask.FunctionFailedException, Microsoft.Azure.WebJobs.Extensions.DurableTask","ClassName":"Microsoft.Azure.WebJobs.Extensions.DurableTask.FunctionFailedException","Message":"The activity function 'FinalizeOrder' failed: \"Failed to deserialize exception from TaskActivity: {\"$type\":\"ACMESharp.Protocol.AcmeProtocolException, ACMESharp\",\"ProblemType\":0,\"ProblemTypeRaw\":null,\"ProblemDetail\":null,\"ProblemStatus\":-1,\"Message\":\"Unexpected response status code [BadRequest] for [FinalizeOrderAsync]\",\"Data\":{\"$type\":\"System.Collections.ListDictionaryInternal, System.Private.CoreLib\"},\"InnerException\":null,\"HelpLink\":null,\"Source\":\"ACMESharp\",\"HResult\":-2146233088,\"StackTrace\":\" at ACMESharp.Protocol.AcmeProtocolClient.SendAcmeAsync(Uri uri, HttpMethod method, Object message, HttpStatusCode[] expectedStatuses, Boolean skipNonce, Boolean skipSigning, Boolean includePublicKey, CancellationToken cancel, String opName)\\r\\n at ACMESharp.Protocol.AcmeProtocolClient.FinalizeOrderAsync(String orderFinalizeUrl, Byte[] derEncodedCsr, CancellationToken cancel)\\r\\n at KeyVault.Acmebot.Functions.SharedActivity.FinalizeOrder(ValueTuple2 input) in /home/runner/work/keyvault-acmebot/keyvault-acmebot/KeyVault.Acmebot/Functions/SharedActivity.cs:line 405\r\n at Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker2.InvokeAsync(Object instance, Object[] arguments) in D:\\\\a\\\\_work\\\\1\\\\s\\\\src\\\\Microsoft.Azure.WebJobs.Host\\\\Executors\\\\FunctionInvoker.cs:line 53\\r\\n at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker, ParameterHelper parameterHelper, CancellationTokenSource timeoutTokenSource, CancellationTokenSource functionCancellationTokenSource, Boolean throwOnTimeout, TimeSpan timerInterval, IFunctionInstance instance) in D:\\\\a\\\\_work\\\\1\\\\s\\\\src\\\\Microsoft.Azure.WebJobs.Host\\\\Executors\\\\FunctionExecutor.cs:line 581\\r\\n at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithWatchersAsync(IFunctionInstanceEx instance, ParameterHelper parameterHelper, ILogger logger, CancellationTokenSource functionCancellationTokenSource) in D:\\\\a\\\\_work\\\\1\\\\s\\\\src\\\\Microsoft.Azure.WebJobs.Host\\\\Executors\\\\FunctionExecutor.cs:line 523\\r\\n at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance, FunctionStartedMessage message, FunctionInstanceLogEntry instanceLogEntry, ParameterHelper parameterHelper, ILogger logger, CancellationToken cancellationToken) in D:\\\\a\\\\_work\\\\1\\\\s\\\\src\\\\Microsoft.Azure.WebJobs.Host\\\\Executors\\\\FunctionExecutor.cs:line 306\"}\". See the function execution logs for additional details.","Data":null,"InnerException":{"$type":"DurableTask.Core.Exceptions.TaskFailedExceptionDeserializationException, DurableTask.Core","ClassName":"DurableTask.Core.Exceptions.TaskFailedExceptionDeserializationException","Message":"Failed to deserialize exception from TaskActivity: {\"$type\":\"ACMESharp.Protocol.AcmeProtocolException, ACMESharp\",\"ProblemType\":0,\"ProblemTypeRaw\":null,\"ProblemDetail\":null,\"ProblemStatus\":-1,\"Message\":\"Unexpected response status code [BadRequest] for [FinalizeOrderAsync]\",\"Data\":{\"$type\":\"System.Collections.ListDictionaryInternal, System.Private.CoreLib\"},\"InnerException\":null,\"HelpLink\":null,\"Source\":\"ACMESharp\",\"HResult\":-2146233088,\"StackTrace\":\" at ACMESharp.Protocol.AcmeProtocolClient.SendAcmeAsync(Uri uri, HttpMethod method, Object message, HttpStatusCode[] expectedStatuses, Boolean skipNonce, Boolean skipSigning, Boolean includePublicKey, CancellationToken cancel, String opName)\\r\\n at ACMESharp.Protocol.AcmeProtocolClient.FinalizeOrderAsync(String orderFinalizeUrl, Byte[] derEncodedCsr, CancellationToken cancel)\\r\\n at KeyVault.Acmebot.Functions.SharedActivity.FinalizeOrder(ValueTuple2 input) in /home/runner/work/keyvault-acmebot/keyvault-acmebot/KeyVault.Acmebot/Functions/SharedActivity.cs:line 405\r\n at Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker`2.InvokeAsync(Object instance, Object[] arguments) in D:\\a\\_work\\1\\s\\src\\Microsoft.Azure.WebJobs.Host\\Executors\\FunctionInvoker.cs:line 53\r\n at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker, ParameterHelper parameterHelper, CancellationTokenSource timeoutTokenSource, CancellationTokenSource functionCancellationTokenSource, Boolean throwOnTimeout, TimeSpan timerInterval, IFunctionInstance instance) in D:\\a\\_work\\1\\s\\src\\Microsoft.Azure.WebJobs.Host\\Executors\\FunctionExecutor.cs:line 581\r\n at

[rahuljha28]

@shibayan , could you please help me with GlobalSign endpoint, how do i see the CSR content generated by acmebot, how do i change it if there is any extra attribute.

[rahuljha28]

i managed to find the csr in AKV, it looks good, idk what the error, even if do not put EAB it gives the same issue, if i put it gives the same error, where is the problem?

[mattTrustzone]

Hi @rahuljha28, not sure if you're still experiencing this issue, but for GlobalSign acme issuance, you need to make sure you're using RSA 2048; so for acmebot, add the keysize environment variable and set it to HS256.