Skip to content

Remove non-standard ACME fields from WFE2 responses #8709

@mcpherrinm

Description

@mcpherrinm

We'd like to start deprecating and removing non-standard fields from Boulder's responses.

Checklist of wire-level fields Boulder emits that are not defined in the RFCs or the drafts Boulder implements: RFC 8555, RFC 9773, RFC 8737, draft-ietf-acme-profiles, draft-ietf-acme-dns-account-challenge, draft-ietf-acme-dns-persist).

  • Account key — emits the full JWK on every account response. RFC 8555
    §7.1.2 enumerates exactly status, contact, termsOfServiceAgreed,
    externalAccountBinding, orders; key is not defined, and §7.3
    specifies the server "MUST NOT reflect … any unrecognized fields" in the
    resulting account object.
    core.Registration.Key

  • Account createdAt — non-standard timestamp on account responses.
    Not defined in RFC 8555 §7.1.2.
    core.Registration.CreatedAt

  • Challenge validationRecord — serializes an internal object tree
    (URLs, hostnames, ports, resolved/tried IPs, resolver addresses) onto
    challenge responses. RFC 8555 §7.1.5 / §8 define only type, url,
    status, validated, error plus per-type fields; this field is not
    defined for any challenge type in RFC 8555, RFC 8737, or the dns-account
    / dns-persist drafts.
    core.Challenge.ValidationRecord

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions