Light

Add verifier for CAA records about acme HOT 2 OPEN

kelunik commented on May 29, 2024

Add verifier for CAA records

from acme.

Comments (2)

cpu commented on May 29, 2024 1

@kelunik The idea of validating CAA ahead of time is a good idea 👍 I also wanted to mention that when you POST an authorization's challenge and it fails because of a CAA record that doesn't allow issuance you should get back a problem document in the response that has a clear detail message that can be echoed to the user. Something like "CAA record for example.com prevents issuance".

from acme.

kelunik commented on May 29, 2024

Wasn't sure what ACME currently reports, but a self-verify like for challenges can be useful anyway.

from acme.

Related Issues (20)

Invalid response: JWS has invalid anti-replay nonce HOT 1
Fix failing tests HOT 3
ECC Support HOT 1
CSR creation with CN only HOT 5
Support for Custom CSRs
Support for Account Deletion HOT 1
Invalid CSR config
use dns01 Challenge HOT 8
kelunik/acme is still using amphp/amp v1, will it be upgraded to use v2? HOT 5
PHPDoc links don't work HOT 3
Discrepancy between master and latest release HOT 15
AcmeService::pollForCertificate does not work for the dns-01 HOT 1
Certificate Renewal only for 5-6 days HOT 4
ACMEv2 support HOT 3
Wildcard certificates HOT 3
New release HOT 2
Implement TLS ALPN support
AcmeService Exception handling: Can't buffer() a payload more than once HOT 1
Location header in FinalizeOrder response HOT 2

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.