Re: acme-client(1): fulfil all challenges, then tell the the CA

2020-12-24 Thread Florian Obser
On Wed, Dec 23, 2020 at 09:58:41PM +, Stuart Henderson wrote: > On 2020/12/23 18:09, Florian Obser wrote: > > First fulfil all challenges then tell the CA that it should check. > > > > With a CSR with multiple SANs acme-client would write one challenge, > > tell the CA, write the next challeng

Re: acme-client(1): fulfil all challenges, then tell the the CA

2020-12-23 Thread Stuart Henderson
On 2020/12/23 18:09, Florian Obser wrote: > First fulfil all challenges then tell the CA that it should check. > > With a CSR with multiple SANs acme-client would write one challenge, > tell the CA, write the next challenge and so on. > > For http-01 this doesn't matter but I think this will be n

acme-client(1): fulfil all challenges, then tell the the CA

2020-12-23 Thread Florian Obser
First fulfil all challenges then tell the CA that it should check. With a CSR with multiple SANs acme-client would write one challenge, tell the CA, write the next challenge and so on. For http-01 this doesn't matter but I think this will be nicer for dns-01 because there are propagation delays t