Hi, I was trying to add support for shortlived certificate to my perl acme client. I experience a bug I don't understand while trying to generate a certificate for : vpn.aoihime.eu aurae.aoihime.eu 144.76.27.210 2a01:4f8:191:1405:: Finalize uri : https://acme-staging-v02.api.letsencrypt.org/…

Subsequent requests : POST https://acme-staging-v02.api.letsencrypt.org/acme/finalize/233932/27051653744 failed: 403 Forbidden at /usr/bin/acme line 487. POST https://acme-staging-v02.api.letsencrypt.org/acme/finalize/233932/27051653744 failed: 400 Bad Request at /usr/bin/acme line 487. POST http…

[image] rapsys: the finalize request still fail with a processing status Why do you think that "processing" is a failure? Processing means that it's in progress, and you need to poll the order until it becomes "valid" or "invalid". Look at the flowcharts in RFC 8555 section 7.1.6. The order…

Motivation was comming from the requirement of my vpn with a letsencrypt certificate for ease of use to circuvent the fucking age verification laws and censorship in france...

Enabling Asynchronous Order Finalization ready to download. We are making this change because such synchronous requests often take a long time due to external dependencies (CT logs for precertificate submissions and DNS for CAA rechecking) and sometimes fail simply due to client-side timeouts. W…

Small question, when I issue my newOrder if it fails in status = processing, what should I do ? I poll already until every challenge is flagged as valid. Which uri should I poll to know the status of my order ? (finalize issue a 403) Should I poll on newOrder uri with same payload until I get a …

[image] rapsys: when I issue my newOrder if it fails in status = processing, what should I do ? Again, I don't know why you say it "fails", you're getting a 200 OK and the "processing" means that it's working as expected. Look at page 48 of RFC 8555, which lists what you should do depending …

[image] petercooperjr: Again, I don't know why you say it "fails", you're getting a 200 OK and the "processing" means that it's working as expected. Getting a 200 OK response with a processing response is confusing. It may have been smarter to send a 100 Continue, 102 Processing or 103 Early…

I'll definitely agree that the ACME protocol seems more convoluted than it needs to be. It's designed to be extensible and work across a lot of different server and client implementations, but there weren't all that many different implementations to start with as they were making it. Things like tha…

OK, I updated my client to support shortlived certificates and async stuff. It succeed in staging environnement, huray. But when trying to get the certificate in letsencrypt production, I get a 403 :cry: : { "type": "urn:ietf:params:acme:error:unauthorized", "detail": "Error creating new order …

[image] rapsys: Is it possible to enable the possibility on my account ? Or know when it will be available ? The only public notice for availability is "later in 2025". See here: We've Issued Our First IP Address Certificate - Let's Encrypt

Shortlived certificate stuck as processing

Client dev

rapsys September 3, 2025, 12:42pm 5

Thanks, will look into it, maybe I need to change something in the order polling as the behaviour changed...

Topic		Replies	Views
Right order to request certificate Client dev	13	3970	January 29, 2018
Apple ACME client failing to poll order when order is in "processing" status Help	5	293	October 31, 2024
Orders stuck on ready Client dev	14	1047	July 3, 2024
Order status pending, is not acceptable for finalization Client dev	16	6734	March 4, 2020
Order's status ("valid") is not acceptable for finalization Client dev	22	7895	March 18, 2020

Shortlived certificate stuck as processing

Related topics