shiny / handyacme Goto Github PK

{
  type: 'urn:ietf:params:acme:error:malformed',
  detail: 'Wildcard not supported, but *.any.host requested',
  code: 400,
  message: 'MALFORMED_BAD_REQUEST',
  details: 'HTTP 400 Bad Request'
}

But interface ErrorDescription require status instead of code.
According to RFC8555, status/code is not required https://datatracker.ietf.org/doc/html/rfc8555#section-6.7

Since the tls-alpn-01 sign method hasn't been implemented yet,
should confirm the tls-alpn-01 sign format as specified in https://datatracker.ietf.org/doc/html/rfc8737

mkcert does not support to act as an ACME server yet. FiloSottile/mkcert#154
Open this issue for tracking.

交流下。
就是我有一个场景，首先域名证书是用dns TXT方式进行验证的。
首先是本地dns验证，验证通过后会到CA进行验证。由于dns TXT可能没有同步全球，CA去它的本地dns验证的时候发现没有相关TXT记录，导致验证失败。能否重新对该TXT记录进行验证。

May be we dont need to HEAD a newNonce everytime.
There is a replay-nonce header in API response.

https://www.rfc-editor.org/rfc/rfc8738.html

now the CSR format is base64url-encoded version of the DER format, which is the default for ACME.