Hi I noticed that when I issue an ACME newOrder request, existing authorization object that is "valid" or "pending" is attached to the newly created order. If an order only contains this valid authorization, it is created in "ready" state. The problem is that in my case, the authorization, even v…

[image] lhuynh: The problem is that in my case, the authorization, even valid, expired 5 days ago. If I read RFC 8555 correctly, this shouldn't be possible. According to section 7.1.6 of RFC 8555 , the status of an authorization (authz) should be updated to "expired" once the time is after th…

Reuse of ACME authorization object

Client dev

petercooperjr July 25, 2023, 6:23pm 8

And also note that Let's Encrypt is contemplating changing this behavior.

6 Likes

Topic		Replies	Views
The lifecycle of a valid authorization Issuance Tech	4	1285	October 6, 2019
Will the order status remain ready? Client dev	7	891	February 9, 2024
V2 API - number of authorizations after many renewals Issuance Tech	6	767	September 27, 2019
Order is sometimes ready before doing authz/challenge Help	3	418	March 23, 2023
FYI, edge case regarding race conditions ACME Orders and Authorizations to test/defend against Client dev	10	120	January 18, 2025

Reuse of ACME authorization object

Related topics