polhenarejos / acme_email

ACME Email Client for EmailReply-00 Challenge
https://acme.castle.cloud
GNU General Public License v3.0
46 stars 7 forks source link

Ordered identifier should have type "email" #4

Open augjoh opened 3 years ago

augjoh commented 3 years ago

When ordering an identifier, type dns is used. An RFC8823 conformant order should have type set to email.

Please see https://datatracker.ietf.org/doc/html/rfc8823#section-3 for more information.

polhenarejos commented 3 years ago

This is correct. However, Certbot overrides any identifier type and always sends dns when making a new order. In particular, it uses IdentifierType.IDENTIFIER_FQDN (see certbot code). Awared of this issue, I had two options:

I do not know the future plans of Certbot or even email-reply-00 challenge will be supported. I hope it will, but in the meantime, I provide this temporary solution.