Certificate renewal fails after upgrade to httpd v2.4.66

"Abfalterer, Armin" <[email protected]> Fri, 19 Jun 2026 10:12:10 +0000
Newsgroups gmane.comp.apache.user
Message-ID <DU0PR08MB1032516694A10AC7C4C0BEE68F7E22@DU0PR08MB10325.eurprd08.prod.outlook.com> 
------408CD9C374D9ED14F04CFDAA67BB54D2
Content-Type: multipart/alternative;
	boundary="_000_DU0PR08MB1032516694A10AC7C4C0BEE68F7E22DU0PR08MB10325eu_"
MIME-version: 1.0

--_000_DU0PR08MB1032516694A10AC7C4C0BEE68F7E22DU0PR08MB10325eu_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi all
An instance running httpd v2.4.66 persistently fails to renew certificates =
with an ACME unauthorized error. ZeroSSL rejects the replaces field in the =
new order, claiming the certificate being replaced does not belong to the c=
urrent ACME account. Renewal never succeeds and the error counter keeps inc=
rementing.
Renewal was working prior to the upgrade to v2.4.66.
Environment

  *   Apache httpd version: 2.4.66
  *
ACME CA: ZeroSSL

Observed Behavior
Renewal fails repeatedly with error count accumulating. The job.json / md-s=
tatus output shows status 13 (Permission denied), problem urn:ietf:params:a=
cme:error:unauthorized, with the detail: "The 'replaces' field does not ide=
ntify a certificate that belongs to this ACME account", during the activity=
 "Creating new order ... replacing-cert=3D...".

{
  "renewal": {
    "name": "xxx",
    "finished": false,
    "notified": false,
    "notified-renewed": false,
    "next-run": "Fri, 19 Jun 2026 06:09:00 GMT",
    "last-run": "Thu, 18 Jun 2026 22:44:59 GMT",
    "errors": 11,
    "last": {
      "status": 13,
      "status-description": "Permission denied",
      "problem": "urn:ietf:params:acme:error:unauthorized",
      "detail": "The \"replaces\" field does not identify a certificate tha=
t belongs to this ACME account",
      "activity": "Creating new order, key-spec=3Ddefault, profile=3Dnone, =
replacing-cert=3Dxxx"
    },
    "cert": {}
  }
}

Is this a known issue? Is there a recommended mitigation?

Regards, Armin


--_000_DU0PR08MB1032516694A10AC7C4C0BEE68F7E22DU0PR08MB10325eu_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
Hi all</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
An instance running httpd v2.4.66 persistently fails to renew certificates =
with an ACME&nbsp;<code>unauthorized</code>&nbsp;error. ZeroSSL rejects the=
&nbsp;<code>replaces</code>&nbsp;field in the new order, claiming the certi=
ficate being replaced does not belong to the current
 ACME account. Renewal never succeeds and the error counter keeps increment=
ing.</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
Renewal was working prior to the upgrade to v2.4.66.</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
<b>Environment</b></div>
<ul style=3D"text-align: left; background-color: rgb(255, 255, 255);">
<li style=3D"font-family: Verdana, sans-serif; font-size: 9pt; color: black=
;">Apache httpd version: 2.4.66</li><li style=3D"font-family: Verdana, sans=
-serif; font-size: 9pt; color: black;">
<div class=3D"elementToProof" role=3D"presentation" style=3D"margin: 0px;">=
ACME CA: ZeroSSL</div>
</li></ul>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
<b>Observed Behavior</b></div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
Renewal fails repeatedly with error count accumulating. The job.json / md-s=
tatus output shows status 13 (Permission denied), problem urn:ietf:params:a=
cme:error:unauthorized, with the detail: &quot;The 'replaces' field does no=
t identify a certificate that belongs
 to this ACME account&quot;, during the activity &quot;Creating new order .=
.. replacing-cert=3D...&quot;.</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
<br>
</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Verdana=
, sans-serif; font-size: 9pt; color: black;">
{</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &quot;renewal&quot;: {</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;name&quot;: &quot;xxx&quot;,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;finished&quot;: false,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;notified&quot;: false,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;notified-renewed&quot;: false,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;next-run&quot;: &quot;Fri, 19 Jun 2026 06:09:00 GMT&quo=
t;,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;last-run&quot;: &quot;Thu, 18 Jun 2026 22:44:59 GMT&quo=
t;,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;errors&quot;: 11,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;last&quot;: {</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &nbsp; &quot;status&quot;: 13,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &nbsp; &quot;status-description&quot;: &quot;Permission denie=
d&quot;,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &nbsp; &quot;problem&quot;: &quot;urn:ietf:params:acme:error:=
unauthorized&quot;,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &nbsp; &quot;detail&quot;: &quot;The \&quot;replaces\&quot; f=
ield does not identify a certificate that belongs to this ACME account&quot=
;,</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &nbsp; &quot;activity&quot;: &quot;Creating new order, key-sp=
ec=3Ddefault, profile=3Dnone, replacing-cert=3Dxxx&quot;</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; },</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; &nbsp; &quot;cert&quot;: {}</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
&nbsp; }</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
}</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
<br>
</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
Is this a known issue? Is there a recommended mitigation?</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
<br>
</div>
<div class=3D"elementToProof" style=3D"text-align: left; text-indent: 0px; =
background-color: rgb(255, 255, 255); margin: 0px; font-family: Verdana, sa=
ns-serif; font-size: 9pt; color: black;">
Regards, Armin</div>
<div class=3D"elementToProof" style=3D"font-family: Verdana, Geneva, sans-s=
erif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>

--_000_DU0PR08MB1032516694A10AC7C4C0BEE68F7E22DU0PR08MB10325eu_--

------408CD9C374D9ED14F04CFDAA67BB54D2
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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------408CD9C374D9ED14F04CFDAA67BB54D2--