Existing account key

[viharm]

Is it possible in LeGo to use an existing account key?

[ldez]

Hello,

technically, yes it's possible but not trivial, you have to reconstruct the following tree and files:

tree

.lego
└── accounts
    └── acme-staging-v02.api.letsencrypt.org
        └── myemail@exmaple.com
            ├── account.json
            └── keys
                └── myemail@exmaple.com.key

account.json

{
	"email": "myemail@exmaple.com",
	"registration": {
		"body": {
			"status": "valid",
			"contact": [
				"mailto:myemail@exmaple.com"
			]
		},
		"uri": "https://acme-staging-v02.api.letsencrypt.org/acme/acct/123456789"
	}
}

myemail@exmaple.com.key is your private key.

[Eagle3386]

@ldez What if lego (as part of certbot-multi-dns which in turn is used in Home Assistant's "app" called letsencrypt) runs in a Docker container, i.e., there's no chance of changing file contents via any given shell?

Can you offer a parameter (or allow for an environment variable) to override the account ID, i.e., the integer after /acct/?

[ldez]

I don't understand the need.

An "account" is several files, and must follow a specific file tree.
The private key is just one element.

As I don't understand your need, I cannot provide a solution.

[ldez]

After more thinking, I'm still not sure to understand the need, but I can create a command to "recover" an existing ACME server account from its private key.

[Eagle3386]

My bad, should've given more context. Here we go:
Using lego (via certbot-multi-dns on Home Assistant), another ACME account was created while I prefer to keep all certs under 1 account.

So, I basically like to have a parameter that lets me specify the account ID & lego than uses that for issuing, renewing, etc. That's because I don't have access to the files or the folder structure as its located within a container.

[ldez]

Could you open a dedicated discussion, and explain in detail your use-case?

[viharm]

Great, thanks. I'll try this.

[ldez]

In lego v5 (unreleased for now), I added a new command accounts recover that allow importing an account by providing the private key.