In testing against the new intermediate certificates on staging we are no longer able to issue or renew certificates at via our lua-resty-auto-ssl based system. We are seeing the same error as when the now abandoned enforcing of async orders was in place: err: ERROR: Problem connecting to server (…

Hi @imfranklin , Since this is recent please read these: [image] Let's Encrypt is adding two new remote perspectives for domain validation API Announcements L… [image] Multi-Perspective Validation & Geoblocking FAQ Issuance Tech (… …

We are having no issues with production.

Kindly wait for more knowledgeable Let's Encrypt community volunteers to assist.

Yes, staging still has async finalization turned on.

Do you mean "on" as in "available" or as in "forcefully required"? Our understanding is it is available but not mandatory in production. If it is mandatory in staging, then we have no means at all to test certificate renewals against the upcoming June 6 changes.

It's about what servers do so if server does async and return 'processing' client need to understand it isn't fail and check later for actual result

There's just "on" or "off", there's no "available but not required" in Boulder, at least today. Finalization is mandatory in staging, to use the terminology you're using. We may require async finalization in some cases in the future in production, but a point further in the future once more client…

Whereas the issuance change has a concrete rollout date within two weeks, and async finalization is a "maybe, for some things, someday", could staging be made to now reflect how production will function on June 6?

We'll discuss that request as a team.

Could you run lua-resty-auto-ssl with this patch: Bump dehydrated to v0.7.1 by cgunther · Pull Request #291 · auto-ssl/lua-resty-auto-ssl · GitHub That upgrades the version of the underlying dehydrated library to something that supports async finalize. It seems lua-resty-auto-ssl hasn't recieved e…

New Issuance Chains on Staging Failing

Help

Bruce5051 May 23, 2024, 7:21pm 2

Hi @imfranklin,

Since this is recent please read these:

Topic		Replies	Views
myVesta / HestiaCP / VestaCP: fail issuance with async finalization Client dev	11	1402	May 6, 2023
Enabling Asynchronous Order Finalization API Announcements	7	5857	April 6, 2023
How one can make staging brownout more useful? Client dev	8	880	May 12, 2023
New staging certs Help	14	1951	July 11, 2024
CSR result never seems to exit 'processing' status in Staging Client dev	10	183	May 1, 2025

New Issuance Chains on Staging Failing

Related topics