Hi I noticed that when I issue an ACME newOrder request, existing authorization object that is "valid" or "pending" is attached to the newly created order. If an order only contains this valid authorization, it is created in "ready" state. The problem is that in my case, the authorization, even v…

[image] lhuynh: The problem is that in my case, the authorization, even valid, expired 5 days ago. If I read RFC 8555 correctly, this shouldn't be possible. According to section 7.1.6 of RFC 8555 , the status of an authorization (authz) should be updated to "expired" once the time is after th…

Reuse of ACME authorization object

Client dev

petercooperjr July 25, 2023, 6:23pm 8

And also note that Let's Encrypt is contemplating changing this behavior.

6 Likes

Topic		Replies	Views
The lifecycle of a valid authorization Issuance Tech	4	1281	October 6, 2019
Pending Order expiration Issuance Tech	4	2002	June 29, 2019
V2 API - number of authorizations after many renewals Issuance Tech	6	750	September 27, 2019
Clarification on v1 authz status and expiry Issuance Tech	1	707	August 10, 2018
Authorization recycling Issuance Tech	6	3301	January 19, 2017

Reuse of ACME authorization object

Related topics