Possible elevated ARI errors "requester account did not request the certificate being replaced by this order"

Has anyone else seen elevated occurrences of ARI errors along the lines of:

urn:ietf:params:acme:error:unauthorized :: Could not validate ARI 'replaces' field :: requester account did not request the certificate being replaced by this order

Where the CA seems to think the cert specified by the ARI Cert ID is from a different account.

I'm trying to figure out if it's a client bug or a CA server change. I can't see it being likely that many people would be changing the ACME accounts in the app but I'm not ruling out a client bug either way. [The client recovers from ARI "replaces" errors by retrying without ARI, so it's hard to tell how persistent this issue is]

Never mind, I think this is a false alarm :slight_smile:

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.