letsencrypt / pebble / 8332779002

6%

master: 8%

push

github

Add "dns-account-01" support from draft-ietf-acme-scoped-dns-challenges (#435)

This change implements the `dns-account-01` ACME challenge as specified
in
[draft-ietf-acme-scoped-dns-challenges](https://datatracker.ietf.org/doc/draft-ietf-acme-scoped-dns-challenges/).

The relevant [validation label
computation](https://github.com/aaomidi/draft-ietf-acme-scoped-dns-challenges/blob/0058e0800/draft-ietf-acme-scoped-dns-challenges.mkd#dns-account-01-challenge)
is:
```plain
"_" || base32(SHA-256(<ACCOUNT_RESOURCE_URL>)[0:10]) || "._acme-" || <SCOPE> || "-challenge"
```
where SCOPE is one of { `host`, `wildcard` }. A SCOPE of { `domain` } is
unimplemented.

This implementation is interoperable with the
https://github.com/eggsampler/acme changes in
https://github.com/eggsampler/acme/pull/21 and passes the
`TestWildcardDNSAccount` test.

Solves https://github.com/letsencrypt/pebble/issues/425.

0 of 42 new or added lines in 1 file covered. (0.0%)

266 of 841 relevant lines covered (31.63%)

1.54 hits per line