Build Update for apache/httpd

Build: #1474
Status: Errored

Duration: 3 mins and 12 secs
Commit: 33af74c (trunk)
Author: Joe Orton
Message: Synch from mod_md github:

mod_md: tolerate missing revokeCert or keyChange resource

RFC 8555 ยง7.1 states:

  The server MUST provide "directory" and "newNonce" resources.

But RFC 8555 makes no explicit statement anywhere whether other
resources are, or are not, required (with the exception of
"newAuthz" which is optional).

Therefore it is possible that some ACME server implementations may
omit some resources; in particular those that are not an essential
part of the "order" workflow.  Indeed, I am working with one such
server implementation, which does not at this time implement
"keyChange".  mod_md refuses to interact with this server because it
is checking that a certain set of resources are defined in the
directory object - despite some of those resources not currently
being used.

Update the check to require only "newNonce", "newAccount" and
"newOrder".  Omit from the check and therefore tolerate the absense
of resources which are not always required: "revokeCert" and

If mod_md implements revocation and/or key rollover in the future,
the availability of those features should be predicated on the
server's advertised capabilities.

Submitted by: Fraser Tweedale <ftweedal>
Github: closes #122


View the changeset:

View the full build log and details:


You can unsubscribe from build emails from the apache/httpd repository going to
Or unsubscribe from *all* email updating your settings at
Or configure specific recipients for build notifications in your .travis.yml 
file. See

Reply via email to