Api Acme /finalize

Hi @protypangel,

I'm sorry that you're having so much difficulty getting the Finalize request to work. I have a few pieces of advice to move forward from here:

  1. If at all possible, switch away from writing your own ACME client and instead use one of the many ACME client libraries that already exist. I know that ACME4j's "finalize" implementation only takes the keypair as input, and then builds the CSR itself so that you don't have to.

  2. If you truly want to proceed down the path of creating your own ACME client, then you need to treat it like science: change only one thing at a time, and carefully document and share both your inputs and your outputs.

For example, saying that you have tried five different methods of creating a CSR is useful, as it suggests that something other than the CSR itself is the issue here. But what would be more useful is sharing everything: all of the commands that you've used to create CSRs, all of the CSR files that have been created as a result of those commands, all of the code that you've used to try to submit those CSRs to an ACME API, and all of the error messages you've gotten in return. We can't help when all we know is "it didn't work". In order to help, we need to know in excruciating detail exactly what didn't work.

6 Likes