Receiving _Unexpected token 'true'_ using Azure plug-in with AZUseIMDS.

[timmgreen]

Receiving Unexpected token 'true' using Azure plug-in with AZUseIMDS.

Module version 4.28.0
Powershell 7.4.4

It appears to be something related to the PluginArgs.

[rmbolger]

Hey @timmgreen, thanks for reaching out. I'm having trouble reproducing this error in my environment. Would you mind trying the following to just create a new order with debug output. Then post the anything you see after the line that says "Creating a new order".

# keep the same $pArgs and $certNames you already had

# switch to staging server so we don't mess with prod rate limits
Set-PAServer LE_STAGE
if (-not (Get-PAAccount)) { New-PAAccount -AcceptTOS }

# create a new order with debug output
$DebugPreference = 'Continue'
New-PAOrder $certNames -Plugin Azure -PluginArgs $pArgs -Force -Verbose

When you're done, don't forget to switch back to Prod using Set-PAServer LE_PROD.

[timmgreen]

DEBUG: Loading PAOrder list from disk
DEBUG: Creating new 2048 order with domains: removed, removed
DEBUG: ACME Header:
{
  "nonce": "lQjHBKQCcoetdrOxP9rPUirase46kUCxHEyX5XiFZ3yamQv4q4w",
  "kid": "https://acme-staging-v02.api.letsencrypt.org/acme/acct/190603734",
  "alg": "ES256",
  "url": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order"
}
DEBUG: ACME Payload:
{"identifiers":[{"value":"<redacted>","type":"dns"},{"value":"removed","type":"dns"}]}
DEBUG: Signing message using EC with SHA256
DEBUG: POST https://acme-staging-v02.api.letsencrypt.org/acme/new-order
{"payload":"eyJpZGVudGlmaWVycyI6W3sidmFsdWUiOiJIUS1EQzIuaHEuc3BlY2lhbG9seW1waWNzLm9yZyIsInR5cGUiOiJkbnMifSx7InZhbHVlIjoiaHEuc3BlY2lhbG9seW1waWNzLm9yZyIsInR5cGUiOiJkbnMifV19","protected":"eyJub25jZSI6I
mxRakhCS1FDY29ldGRyT3hQOXJQVWlyYXNlNDZrVUN4SEV5WDVYaUZaM3lhbVF2NHE0dyIsImtpZCI6Imh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xOTA2MDM3MzQiLCJhbGciOiJFUzI1NiIsInVybCI6Imh0d
HBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIn0","signature":"7doBxaQkudyDOUB2miuDTE9imw2RNBsj5xrN_WvDhgdZQLQkYLKFZH62xSzlNgA_3wfn-zKM_xi7duuCO36YBg"}
DEBUG: ACME Response:
{
  "status": "pending",
  "expires": "2025-03-27T19:54:27Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "removed"
    },
    {
      "type": "dns",
      "value": "removed"
    }
  ],
  "authorizations": [
    "https://acme-staging-v02.api.letsencrypt.org/acme/authz/190603734/16482992354",
    "https://acme-staging-v02.api.letsencrypt.org/acme/authz/190603734/16482992364"
  ],
  "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/190603734/23386034214"
}
DEBUG: Updated nonce: Lm-FSiiHBk4meAVrbeOinWfKZv5Ugf4dw8Tt1gzXnWn4P_fgr2w
DEBUG: Adding location https://acme-staging-v02.api.letsencrypt.org/acme/order/190603734/23386034214
DEBUG: Loading PAOrder list from disk
DEBUG: ACME Header:
{
  "nonce": "Lm-FSiiHBk4meAVrbeOinWfKZv5Ugf4dw8Tt1gzXnWn4P_fgr2w",
  "kid": "https://acme-staging-v02.api.letsencrypt.org/acme/acct/190603734",
  "alg": "ES256",
  "url": "https://acme-staging-v02.api.letsencrypt.org/acme/authz/190603734/16482992354"
}
DEBUG: ACME Payload: (empty)
DEBUG: Signing message using EC with SHA256
DEBUG: POST https://acme-staging-v02.api.letsencrypt.org/acme/authz/190603734/16482992354
{"payload":"","protected":"eyJub25jZSI6IkxtLUZTaWlIQms0bWVBVnJiZU9pbldmS1p2NVVnZjRkdzhUdDFnelhuV240UF9mZ3IydyIsImtpZCI6Imh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xOTA2M
DM3MzQiLCJhbGciOiJFUzI1NiIsInVybCI6Imh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHovMTkwNjAzNzM0LzE2NDgyOTkyMzU0In0","signature":"BCnD0ZHGbY4OLIxxMEphoSqLOwObWkdpyjuwdAFNhE2
HIwK8e1vxWwos6nH66SjoDp89qG--NCGDZSgL7h39Dw"}
DEBUG: ACME Response:
{
  "identifier": {
    "type": "dns",
    "value": "removed"
  },
  "status": "pending",
  "expires": "2025-03-27T19:54:27Z",
  "challenges": [
    {
      "type": "dns-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/190603734/16482992354/gRIIqg",
      "status": "pending",
      "token": "fdJaTQlNyQ7mA2ANVIWyonL5n0-Scmxe15FNO6kJGBI"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/190603734/16482992354/eTNrCg",
      "status": "pending",
      "token": "fdJaTQlNyQ7mA2ANVIWyonL5n0-Scmxe15FNO6kJGBI"
    },
    {
      "type": "http-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/190603734/16482992354/VZJ_SQ",
      "status": "pending",
      "token": "fdJaTQlNyQ7mA2ANVIWyonL5n0-Scmxe15FNO6kJGBI"
    }
  ]
}
DEBUG: Updated nonce: lQjHBKQC8xOHQwsbAZAQV5Db4qpwqVOIGi4d2au0P70ZuTCNMkI
DEBUG: ACME Header:
{
  "nonce": "lQjHBKQC8xOHQwsbAZAQV5Db4qpwqVOIGi4d2au0P70ZuTCNMkI",
  "kid": "https://acme-staging-v02.api.letsencrypt.org/acme/acct/190603734",
  "alg": "ES256",
  "url": "https://acme-staging-v02.api.letsencrypt.org/acme/authz/190603734/16482992364"
}
DEBUG: ACME Payload: (empty)
DEBUG: Signing message using EC with SHA256
DEBUG: POST https://acme-staging-v02.api.letsencrypt.org/acme/authz/190603734/16482992364
{"payload":"","protected":"eyJub25jZSI6ImxRakhCS1FDOHhPSFF3c2JBWkFRVjVEYjRxcHdxVk9JR2k0ZDJhdTBQNzBadVRDTk1rSSIsImtpZCI6Imh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xOTA2M
DM3MzQiLCJhbGciOiJFUzI1NiIsInVybCI6Imh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHovMTkwNjAzNzM0LzE2NDgyOTkyMzY0In0","signature":"rlwspwKLm9OAgxLU7uZps-Zs-3SDPFuil2HtBQ8G5xj
4vu3GNtFPdUx1-DmRsTGRRm1Fy67mbwFKhycc9VFR2w"}
DEBUG: ACME Response:
{
  "identifier": {
    "type": "dns",
    "value": "removed"
  },
  "status": "pending",
  "expires": "2025-03-27T19:54:27Z",
  "challenges": [
    {
      "type": "tls-alpn-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/190603734/16482992364/i9Jn4g",
      "status": "pending",
      "token": "Tcd0Q4SRdueDIpXK_JMfiblJTW2UZAyBSQGbwwNLs3A"
    },
    {
      "type": "dns-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/190603734/16482992364/5vVaBA",
      "status": "pending",
      "token": "Tcd0Q4SRdueDIpXK_JMfiblJTW2UZAyBSQGbwwNLs3A"
    },
    {
      "type": "http-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/190603734/16482992364/w1sXcQ",
      "status": "pending",
      "token": "Tcd0Q4SRdueDIpXK_JMfiblJTW2UZAyBSQGbwwNLs3A"
    }
  ]
}
DEBUG: Updated nonce: Lm-FSiiHHH_tf6B3orifNaTMCdkjEP3Fi876IqebcPauzyE-7CY
DEBUG: Exporting plugin args for order 'removed' with plugins Azure
DEBUG: Loading PAOrder list from disk
DEBUG: Attempting to load plugin Azure
Export-PluginArgs: C:\Program Files\WindowsPowerShell\Modules\Posh-ACME\4.28.0\Public\New-PAOrder.ps1:361
Line |
 361 |          Export-PluginArgs -Order $order -PluginArgs $PluginArgs
     |          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | Unexpected token 'true' }

[timmgreen]

If it makes a difference I'm running as SYSTEM using PSEXEC64

[rmbolger]

Sorry for the delay on this. Haven't found enough time to dig back in on it and just wanted to let you know I haven't forgotten about it.

[rmbolger]

Hey @timmgreen, I created a branch that has a whole bunch more debug logging in the Export-PluginArgs function. Can you download that file from the link below and overwrite your local copy with it?
https://github.com/rmbolger/Posh-ACME/blob/issue-606/Posh-ACME/Private/Export-PluginArgs.ps1

Then open a new PowerShell session and re-try the debug output script again and post the output. This time, you can skip everything until the message Exporting plugin args for order.