internet/community.crypto
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.crypto.git synced 2026-04-16 05:41:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove bad check. (#1001)

Browse Source 
The returned account URI can be intentionally different,
see Section 7.2.2 'Account URI Privacy':
https://www.ietf.org/archive/id/draft-ietf-acme-dns-persist-01.html#section-7.2.2
This commit is contained in:
Felix Fontein
2026-04-07 21:32:34 +02:00
committed by GitHub
parent bb40d15b45
commit bfce6df1bb
1 changed files with 0 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
plugins/module_utils/_acme/challenges.py
View File

@@ -123,14 +123,6 @@ class Challenge:
or not all(isinstance(idn, str) for idn in issuer_domain_names)
):
return None
if client.account_uri is not None and account_uri != client.account_uri:
# While the RFC doesn't demand this, I think it's a bad sign if the account URIs disagree.
# Better err on the side of caution...
client.module.warn(
f"The dns-persist-01 challenge for DNS:{identifier} has account URI {account_uri!r},"
f" while the client is has account URI {client.account_uri}. Ignoring malformed challenge."
)
return None
if not (1 <= len(issuer_domain_names) <= 10):
client.module.warn(
f"The dns-persist-01 challenge for DNS:{identifier} has {len(issuer_domain_names)}"