komuw / ong

ong, is a Go http toolkit.
MIT License
16 stars 4 forks source link

acme: request for certificate for subdomain starting with number is rejected #327

Closed komuw closed 1 year ago

komuw commented 1 year ago

  "status": "invalid",
  "expires": "2023-07-25T18:08:12Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "2023.example.com"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/22544"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/242/25254"
}
{
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:ietf:params:acme:error:unauthorized",
    "detail": "Invalid response from http://2023.example.com/.well-known/acme-challenge/JpSr8: 418",
    "status": 403
  },

curl -vkL http://2023.example.com/.well-known/acme-challenge/JWZddpH7ACSr8

HTTP/1.1 418 I'm a teapot
ong/acme: request.host for well-known/acme-challenge request should not be IP address