pebble
pebble copied to clipboard
Implement latest draft-ietf-acme-ari spec
The draft spec version at the time of this PR was draft-ietf-acme-ari-03, but failed replacement order handling is from the yet-to-be-released draft-ietf-acme-ari-04.
- Add a
renewalInfo
entry to the directory object which provides the base URL for ARI requests. - Add a new WFE handlefunc which parses incoming requests and returns reasonable
renewalInfo
for determining when the client should attempt renewal of a certificate. - Add support for marking orders as
replaced
. Replacement orders can be chained, but there can be no duplicate replacement of orders, just like boulder. - Restructured the asynchronous finalization anonymous go func to handle storing replaced orders. To be replaced, an order must previously have been finalized and have an issued certificate.