Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-15435

Update AcmeClientSpi.changeAccountKey() to no longer send the newKey once the new ACME v2 changes are in production

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 7.2.0.CD14
    • None
    • Security
    • None

      For ELY-1629, AcmeClientSpi.changeAccountKey() was updated to include both newKey and oldKey in the inner payload for the account key change request to prepare for the ACME v2 key rollover breaking change. Currently, specifying both works fine since Let's Encrypt's staging server will expect oldKey and ignore newKey and Let's Encrypt's production server will expect newKey and ignore oldKey. However, once the new ACME v2 key rollover changes are available in Let's Encrypt's production server on Aug. 23rd, we can update this method to only include the oldKey in the inner payload.

              fjuma1@redhat.com Farah Juma
              fjuma1@redhat.com Farah Juma
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: