Buypass Company Site

How to enable Javascript

Latest Posts

Re: Support for verifying challenges over IPv6 Hi @Andre Tomt Could you provide us with more details, like “MDC-correlationId” response header value, which is sent as a response header from our server and also the date/time for the failed…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 2 wk ago
- Questions
- Reported - view
Re: mail and acme-client Hi @22Decembre After analyzing the source code of OpenBSD’s acme-client we found that it cannot be used with our API. Here is the snippet from source as of today: https://cvsweb.openbsd.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 2 mths ago
- Questions
- Reported - view
Re: Future features Hi @fomm While we recognize that international domain names serve an important purpose, we are more concerned about their possible utilization in phishing attacks.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 2 mths ago
- Discussion
- Reported - view
Re: ACME V2 error: HTTP 406 Not Acceptable Hi @Anindya It looks that there is a content negotiation issue on the endpoint to download the certificate. According to https://tools.ietf.org/html/rfc8555#section-7.4.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 2 mths ago
- Questions
- Reported - view
Re: "Certificate won't be issued for more than 2 domain(s)" Hi @Calvin Hoy Sorry for any miscommunication. We support 5 domains in production after a release earlier today. Prior to this date we supported them in test only.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 2 mths ago
- Questions
- Reported - view
Re: ACME V2 - staging vs production behaviour is different. Hi @webprofusion We plan to adjust the test and production environments to have equal features with respect to multi-domain and will update the info on community once this is in place.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 4 mths ago
- Questions
- Reported - view
Re: Future features Hi @chin We plan to implement following of redirects. However, the ETA of it is unknown. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 4 mths ago
- 1
- Discussion
- Reported - view
Re: Chain/fullchain file contains unexpected characters Hi @Jozsef Szilagyi Thanks for raising this question and feedback! We have verified our implementation and the chain, as returned from API and didn’t find any divergences from https://tools.ietf.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 4 mths ago
- Questions
- Reported - view
Re: v2 new-order failure internal error (with log) Hi @Jay737 Sorry for late reply. There happened an internal timeout in our system during CAA resolution, which took considerable time (possibly because of lack of configuration on the domain to be…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 5 mths ago
- Questions
- Reported - view
Re: Buypass not sending CAA violation reports (IODEF) Hi @Jamie Scaife We do not currently have any plans to send IODEF incident reports as defined in the CAA specification. However, as this could have value for the wider ecosystem,…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 5 mths ago
- 1
- Questions
- Answer
- Reported - view
Re: Support for IDN Domains Hi @Georg We haven’t taken the decision yet whether to enable following of redirects during the http challenge validation. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 5 mths ago
- Questions
- Reported - view
Re: RFC8555 section 7.3.1 compliance Hi @Attila Sorry for late reply. Thanks for reporting. We plan to fix it. However ETA of the fix is currently unknown. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 5 mths ago
- Questions
- Reported - view
Re: How to invalidate pending authorizations Hi @Daniel Sorry for late reply. We have recently introduced a one-week sliding window for pending authorizations. So only pending authorizations during recent 7 days will be taken into account when…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- Questions
- Answer
- Reported - view
Re: Error: "Certificate format requested not supported" Hi @Andreea Ramstadt This bug was fixed. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- Questions
- Answer
- Reported - view
Re: ACME : An unexpected error occurred: Hi @Daniel Sorry for late reply. It is possible to use the https://tools.ietf.org/html/rfc8555#section-7.5.2 authorization-deactivation feature to deactivate authorization.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- Questions
- Answer
- Reported - view
Re: RFC8555 section 7.3.1 compliance Hi @Attila Thanks for reporting this case. We have added it to the bug tracker. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 7 mths ago
- 1
- Questions
- Reported - view
Re: How to invalidate pending authorizations Hi @Dongyeon We are investigating this case. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 8 mths ago
- Questions
- Reported - view
Re: Error: All authorizations were not finalized by the CA Hi @ProK Please provide us with more details when you experience such error: like “MDC-correlationId” response header value, which is sent as a response header from our server and also the date/time…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 9 mths ago
- Questions
- Reported - view
Re: DNS challenge: authz is pending, challenge processing even after error is present Hi @Felix Fontein Thanks for providing the details, this made the investigation easier. We have implemented the retrying of challenges https://tools.ietf.org/html/rfc8555#section-8.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 10 mths ago
- Questions
- Answer
- Reported - view
Re: Finding existing accounts (by key) and revocation Hi @Felix Fontein 1. We improved our solution according to the suggested flow and this is available now in our test environment. 2. We do not support revocation requests that are signed with the key…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- 1
- Questions
- Answer
- Reported - view
Re: Issue while generating certificate from DNS challenge Hi @ProK Our implementation reuses authorization for a domain while it has not expired. So when the request is made to authorize the domain, the server can send in response to the client previous…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Questions
- Answer
- Reported - view
Re: Trouble with ACME v1 endpoint Hi @Felix Fontein The JWS has duplicate keys alg and jwk in protected and unprotected headers. Therefore the jws was rejected by the server. Info from JWS spec: “ For a JWS,…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Questions
- Answer
- Reported - view
Re: http-01 DCV not working in ACME v2 Test endpoint Hi @Devarajan We have investigated this case and didn’t find any issues with completing the http-01 validation on 27,28 of August. However we have added more logging to our solution now to help…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Questions
- Answer
- Reported - view
Re: Do you follow redirect when validate http-01 ? Hi @chin , @Magnus Our implementation does not follow redirects. Regards, @Andriy Mahats
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Questions
- Answer
- Reported - view
Re: Unable to complete validating domain Hi @Kim We have investigated this case and found that during the domain validation, the TXT record returned from the validation domain name, did not contain the correct digest value.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- Questions
- Answer
- Reported - view

1 2 Next

Back to top

official rep

Andriy Mahats

Andriy_Mahats

50
6
1

Follow