mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-11 22:30:44 +01:00
External Account Binding support. #478
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @tzim-fr on GitHub (Jun 19, 2020).
Certigo service support ACME, but it requires support for "external account binding" (see section 7.3.4 in acme specs) at registration.
If I understand the specs correctly, only the newAccount request needs to be modified.
Is there plans to implement this feature ?
@lukas2511 commented on GitHub (Jul 5, 2020):
Looks easy to implement, but I have nowhere to actually test this...
Note to self: https://tools.ietf.org/html/rfc8555#section-7.3.4
@cpu commented on GitHub (Jul 6, 2020):
Pebble supports external account binding.
@lukas2511 commented on GitHub (Jul 6, 2020):
Ah, @cpu to the rescue ;)
Was going to set up Pebble anyway for automatic testing, will work on this feature when my test environment is back up! 👍
@sigio commented on GitHub (Nov 23, 2020):
Zerossl is now live, which is sectigo's ssl service
CA ACME endpoint is at https://acme.zerossl.com/v2/DV90
Trying to use it returns:
{"type":"urn:ietf:params:acme:error:externalAccountRequired","status":400,"detail":"The request must include a value for the "externalAccountBinding" field"}
@saz commented on GitHub (Nov 23, 2020):
You should set EAB_KID/EAB_HMAC_KEY in your config
@sigio commented on GitHub (Nov 24, 2020):
Thanks... that worked (as soon as I upgraded to latest version :P )
@lukas2511 commented on GitHub (Dec 10, 2020):
This is now implemented.