LE getARI failing AKID did not match known issuer

[githubRover]

php 8.2.26
openssl 3.0.15
Debian 12.9

I have ACMECert working to get certs using TLS-ALPN-01 with ualpn server (from Debian package). ACMECert was downloaded yesterday.

But, getARI requests are failing with error shown below from ACMECert log.

I even downloaded the cert for letsencrypt.org and it fails with the same message as for my own domains. I tried both LE production and staging with same failure. I guess it could be my fault I just don't see what's wrong :)

$ret = $ac->getARI("file://$certFqn",$ariCertId);

Same cert files work fine for calls to Days or Percent remaining:

$left = $ac->getRemainingPercent("file://$certFqn");

Log for test with leaf cert (.pem) for letsencrypt.org

Initializing ACME v2 environment: https://acme-v02.api.letsencrypt.org/directory
Using cURL
  https://acme-v02.api.letsencrypt.org/directory [200] (0.14s)
Initialized
  https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-03/renewalInfo/RpgDqVFojpjWxEJI2yO_WJTS.BMenOjYawCtnvb1q8hAoWxzH [404] (0.04s)
ACME_Exception: While parsing ARI CertID an error occurred :: path contained an Authority Key Identifier that did not match a known issuer (urn:ietf:params:acme:error:malformed)

Thanks

[skoerfgen]

Thank you for reporting this issue!

The newer OpenSSL versions seem to ommit the "keyid:" prefix for the "authorityKeyIdentifier" field.

This and another issue with the "serialNumber" should be fixed now in the AKID branch here:

https://github.com/skoerfgen/ACMECert/tree/AKID

Please let me know if it resolves your issue.

[githubRover]

Fixed for me. Thanks for prompt response. And, for offering it at all. Nice tool.

[skoerfgen]

Thank you!

[skoerfgen]

I have just released ACMECert v3.4.1 containing the bugfix!