From bfce6df1bbd7fd970df98bce1db723734d5162ff Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Tue, 7 Apr 2026 21:32:34 +0200 Subject: [PATCH] Remove bad check. (#1001) The returned account URI can be intentionally different, see Section 7.2.2 'Account URI Privacy': https://www.ietf.org/archive/id/draft-ietf-acme-dns-persist-01.html#section-7.2.2 --- plugins/module_utils/_acme/challenges.py | 8 -------- 1 file changed, 8 deletions(-) diff --git a/plugins/module_utils/_acme/challenges.py b/plugins/module_utils/_acme/challenges.py index 8b6d3e7d..d901450e 100644 --- a/plugins/module_utils/_acme/challenges.py +++ b/plugins/module_utils/_acme/challenges.py @@ -123,14 +123,6 @@ class Challenge: or not all(isinstance(idn, str) for idn in issuer_domain_names) ): return None - if client.account_uri is not None and account_uri != client.account_uri: - # While the RFC doesn't demand this, I think it's a bad sign if the account URIs disagree. - # Better err on the side of caution... - client.module.warn( - f"The dns-persist-01 challenge for DNS:{identifier} has account URI {account_uri!r}," - f" while the client is has account URI {client.account_uri}. Ignoring malformed challenge." - ) - return None if not (1 <= len(issuer_domain_names) <= 10): client.module.warn( f"The dns-persist-01 challenge for DNS:{identifier} has {len(issuer_domain_names)}"