{"action":"created","issue":{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1647","labels_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1647/labels{/name}","comments_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1647/comments","events_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1647/events","html_url":"https://github.com/letsencrypt/letsencrypt/issues/1647","id":119765578,"number":1647,"title":"request via --csr fails","user":{"login":"gdkags","id":699867,"avatar_url":"https://avatars.githubusercontent.com/u/699867?v=3","gravatar_id":"","url":"https://api.github.com/users/gdkags","html_url":"https://github.com/gdkags","followers_url":"https://api.github.com/users/gdkags/followers","following_url":"https://api.github.com/users/gdkags/following{/other_user}","gists_url":"https://api.github.com/users/gdkags/gists{/gist_id}","starred_url":"https://api.github.com/users/gdkags/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gdkags/subscriptions","organizations_url":"https://api.github.com/users/gdkags/orgs","repos_url":"https://api.github.com/users/gdkags/repos","events_url":"https://api.github.com/users/gdkags/events{/privacy}","received_events_url":"https://api.github.com/users/gdkags/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-12-01T17:18:12Z","updated_at":"2015-12-01T19:51:20Z","closed_at":null,"body":"I might have done something wrong, but I could not get it to work.\r\nMight be all my fault, tho.\r\nPython fails somewhere while trying to parse the SANs, could not get my head around the openssl python lib.\r\n\r\nDistro: arch\r\nLE-Version: 0.0.0.dev20151123-1\r\n\r\nAt least you should be able to reproduce with those two things:\r\n\r\nLE was started via:\r\n```\r\nletsencrypt certonly --authenticator standalone --server https://acme-v01.api.letsencrypt.org/directory --agree-dev-preview --csr 20151201-mk2.0ds.de.csr --cert-path le-certs/\r\n```\r\n\r\n\r\nthe csr in question is here.\r\n```\r\n-----BEGIN CERTIFICATE REQUEST-----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\r\ndmj7lq2s8hT0BUpi3USeU0TQwSMJi/0GUkU=\r\n-----END CERTIFICATE REQUEST-----\r\n```\r\n```\r\nTraceback (most recent call last):\r\n  File \"/usr/lib/python2.7/site-packages/letsencrypt/crypto_util.py\", line 225, in _get_sans_from_cert_or_req\r\n    cert_or_req = load_func(typ, cert_or_req_str)\r\n  File \"/usr/lib/python2.7/site-packages/OpenSSL/crypto.py\", line 2380, in load_certificate_request\r\n    _raise_current_error()\r\n  File \"/usr/lib/python2.7/site-packages/OpenSSL/_util.py\", line 48, in exception_from_error_queue\r\n    raise exception_type(errors)\r\nError: [('asn1 encoding routines', 'ASN1_CHECK_TLEN', 'wrong tag'), ('asn1 encoding routines', 'ASN1_ITEM_EX_D2I', 'nested asn1 error')]\r\n2015-12-01 15:13:21,018:DEBUG:letsencrypt.cli:Exiting abnormally:\r\nTraceback (most recent call last):\r\n  File \"/usr/bin/letsencrypt\", line 9, in <module>\r\n    load_entry_point('letsencrypt==0.0.0.dev20151123', 'console_scripts', 'letsencrypt')()\r\n  File \"/usr/lib/python2.7/site-packages/letsencrypt/cli.py\", line 1206, in main\r\n    return args.func(args, config, plugins)\r\n  File \"/usr/lib/python2.7/site-packages/letsencrypt/cli.py\", line 494, in obtain_cert\r\n    file=args.csr[0], data=args.csr[1], form=\"der\"))\r\n  File \"/usr/lib/python2.7/site-packages/letsencrypt/client.py\", line 245, in obtain_certificate_from_csr\r\n    csr.data, OpenSSL.crypto.FILETYPE_ASN1), csr)\r\n  File \"/usr/lib/python2.7/site-packages/letsencrypt/crypto_util.py\", line 258, in get_sans_from_csr\r\n    csr, OpenSSL.crypto.load_certificate_request, typ)\r\n  File \"/usr/lib/python2.7/site-packages/letsencrypt/crypto_util.py\", line 225, in _get_sans_from_cert_or_req\r\n    cert_or_req = load_func(typ, cert_or_req_str)\r\n  File \"/usr/lib/python2.7/site-packages/OpenSSL/crypto.py\", line 2380, in load_certificate_request\r\n    _raise_current_error()\r\n  File \"/usr/lib/python2.7/site-packages/OpenSSL/_util.py\", line 48, in exception_from_error_queue\r\n    raise exception_type(errors)\r\nError: [('asn1 encoding routines', 'ASN1_CHECK_TLEN', 'wrong tag'), ('asn1 encoding routines', 'ASN1_ITEM_EX_D2I', 'nested asn1 error')]\r\n```\r\n\r\nIf you need more information, I'll gladly try to help.\r\n\r\nThank you for being awesome!"},"comment":{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/comments/161076509","html_url":"https://github.com/letsencrypt/letsencrypt/issues/1647#issuecomment-161076509","issue_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1647","id":161076509,"user":{"login":"pde","id":479213,"avatar_url":"https://avatars.githubusercontent.com/u/479213?v=3","gravatar_id":"","url":"https://api.github.com/users/pde","html_url":"https://github.com/pde","followers_url":"https://api.github.com/users/pde/followers","following_url":"https://api.github.com/users/pde/following{/other_user}","gists_url":"https://api.github.com/users/pde/gists{/gist_id}","starred_url":"https://api.github.com/users/pde/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pde/subscriptions","organizations_url":"https://api.github.com/users/pde/orgs","repos_url":"https://api.github.com/users/pde/repos","events_url":"https://api.github.com/users/pde/events{/privacy}","received_events_url":"https://api.github.com/users/pde/received_events","type":"User","site_admin":false},"created_at":"2015-12-01T19:51:20Z","updated_at":"2015-12-01T19:51:20Z","body":"Presently --csr only supports DER formatted certificates, and not PEM certs.  Feel free to send us a pull request to support both!"}}