From: Rogdham <contact@rogdham.net>
Date: Mon, 30 Mar 2020 19:26:00 +0000 (+0200)
Subject: Fix challenge response POST body in ACMEv2
X-Git-Tag: v0.7.0~56
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F726%2Fhead;p=thirdparty%2Fdehydrated.git

Fix challenge response POST body in ACMEv2

Per https://tools.ietf.org/html/rfc8555#section-7.5.1

> The client indicates to the server that it is ready for the challenge
> validation by sending an empty JSON body ("{}") carried in a POST
> request to the challenge URL (not the authorization URL).
---

diff --git a/dehydrated b/dehydrated
index aacb66b..1362f8a 100755
--- a/dehydrated
+++ b/dehydrated
@@ -809,7 +809,7 @@ sign_csr() {
     if [[ ${API} -eq 1 ]]; then
       result="$(signed_request "${challenge_uris[${idx}]}" '{"resource": "challenge", "keyAuthorization": "'"${keyauths[${idx}]}"'"}' | clean_json)"
     else
-      result="$(signed_request "${challenge_uris[${idx}]}" '{"keyAuthorization": "'"${keyauths[${idx}]}"'"}' | clean_json)"
+      result="$(signed_request "${challenge_uris[${idx}]}" '{}' | clean_json)"
     fi
 
     reqstatus="$(printf '%s\n' "${result}" | get_json_string_value status)"