Order finalization should check that the order is "valid" before trying to download the certificate #432

Closed
opened 2025-12-29 01:25:03 +01:00 by adam · 2 comments
Owner

Originally created by @alexzorin on GitHub (Sep 10, 2019).

When dehydrated posts its CSR to the order finalization URL, it assumes that the certificate will be signed and immediately available for download in the response:

018254974c/dehydrated (L870-L871)

However, the order may be in any number of states other than validsuch as processing, where dehydrated should wait and poll until the certificate is ready for download.

Currently, dehydrated assumes the certificate field is always present which leads to an error. This error can be reproduced by running dehydrated against Pebble.

Originally created by @alexzorin on GitHub (Sep 10, 2019). When dehydrated posts its CSR to the order finalization URL, it assumes that the certificate will be signed and immediately available for download in the response: https://github.com/lukas2511/dehydrated/blob/018254974cb6cbf93ba9249b06b2d923e37a9e88/dehydrated#L870-L871 However, the order may be [in any number of states](https://tools.ietf.org/html/rfc8555#page-48) other than `valid`such as `processing`, where dehydrated should wait and poll until the certificate is ready for download. Currently, dehydrated assumes the `certificate` field is always present which leads to an error. This error can be reproduced by running dehydrated against Pebble.
adam added the bug label 2025-12-29 01:25:03 +01:00
adam closed this issue 2025-12-29 01:25:03 +01:00
Author
Owner

@Rogdham commented on GitHub (Mar 30, 2020):

See #728 for a possible fix.

@Rogdham commented on GitHub (Mar 30, 2020): See #728 for a possible fix.
Author
Owner

@lukas2511 commented on GitHub (Apr 2, 2020):

Fixed by #728, thanks.

@lukas2511 commented on GitHub (Apr 2, 2020): Fixed by #728, thanks.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#432