]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 054fa05) | patch
BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 23 Jul 2025 10:32:34 +0000 (12:32 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Wed, 23 Jul 2025 10:42:23 +0000 (12:42 +0200)
commit7139ebd67659748e4447613cb3f2e12fd0229c12
tree1a4d48f7dcf913377d249601269ec967662ba7f4tree
parent054fa05e1fa90b4a43c268917a31fbbfb109f14dcommit | diff
BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources

The requests that checked the status of the challenge and the retrieval
of the certificate were done using a GET.

This is working with letsencrypt and other CA providers, but it might
not work everywhere. RFC 8555 specifies that only the directory and
newNonce resources MUST work with a GET requests, but everything else
must use POST-as-GET.

Must be backported to 3.2.
src/acme.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git