Skip to content

Add accounturi to dns-persist-01 challenges#544

Merged
beautifulentropy merged 2 commits into
letsencrypt:mainfrom
felixfontein:dns-persist-01
Apr 20, 2026
Merged

Add accounturi to dns-persist-01 challenges#544
beautifulentropy merged 2 commits into
letsencrypt:mainfrom
felixfontein:dns-persist-01

Conversation

@felixfontein
Copy link
Copy Markdown
Contributor

@felixfontein felixfontein commented Apr 1, 2026

@felixfontein
Copy link
Copy Markdown
Contributor Author

I did test this with my client, with the compat shim for draft 00 deactivated (my original code rejected challenges with the wrong account URI, until I tested it against Pebble :) ).

@beautifulentropy beautifulentropy self-requested a review April 20, 2026 15:52
Copy link
Copy Markdown
Member

@beautifulentropy beautifulentropy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution, this looks good to me.

Copy link
Copy Markdown
Contributor

@aarongable aarongable left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code change LGTM, but we really need to make sure that no one thinks merely reflecting the Host: header into the challenge's canonical accountURI is actually acceptable, so I'd like a comment something like the suggestion below to be included.

Comment thread wfe/wfe.go
… Pebble, but not in general.

Co-authored-by: Aaron Gable <aaron@aarongable.com>
@beautifulentropy beautifulentropy merged commit b1e1ca4 into letsencrypt:main Apr 20, 2026
14 checks passed
@felixfontein felixfontein deleted the dns-persist-01 branch April 20, 2026 19:33
@felixfontein
Copy link
Copy Markdown
Contributor Author

@beautifulentropy @aarongable thanks for reviewing and merging!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants