Authorizations are not required to be already validated on 'finalize' about pebble HOT 5 CLOSED

@sophie-h I'm not sure I fully understand this issue. Can you elaborate, maybe including the POST bodies & responses in question?

You say you've posted the order's authorization's challenge URL(s), did that successfully transition the authorizations to state valid?

from pebble.

First a quick reply. Maybe that's already sufficient for clarification.

You say you've posted the order's authorization's challenge URL(s), did that successfully transition the authorizations to state valid?

Most likely not, because validation is deferred. I think the main question is: Can I finalize before all authorizations are valid?

from pebble.

Hi @sophie-h,

I only just saw that you posted a message related to this to the ACME WG mailing list as well. I'm a bit behind on my Inbox after the holidays but will try to get to the ACME WG in the next day or so.

Most likely not, because validation is deferred. I think the main question is: Can I finalize before all authorizations are valid?

My expectation was that clients should only finalize when the authorizations in the order are all status = valid.

from pebble.

Hey @cpu,

My expectation was that clients should only finalize when the authorizations in the order are all status = valid.

I think this was even the (your) whole point of finalization. So this seems to be a matter of clarification in the draft.

from pebble.

I think the hang-up from this issue is addressed cleanly by the Order "ready" state from #98. I'm going to close this issue in favour of #98. draft-10+ makes it clear that the order is status "ready" when all of the authorizations are status "valid" and that only status "ready" orders should be finalized.

Thanks!

from pebble.