Buypass Company Site

How to enable Javascript

Latest Posts

Re: DNS-01 validation and caching Hello @Andreea Ramstadt We consider the querying of authoritative DNS servers as improvement to our current solution, however we haven’t taken that decision yet and the ETA is unknown.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 2 days ago
- Questions
- Reported - view
Re: DNS-01 validation and caching Hello @Andreea Ramstadt We do not require the TXT record to be sole or the first record, if multiple are present. We are not using the authoritative DNS server.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 days ago
- Questions
- Reported - view
Re: Deactivating an Authorization Hi @Stefan Thanks for reporting the issue and detailed info. We have identified the bug and fixed it in test environment. We plan to deploy the fix to production.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 13 days ago
- Questions
- Reported - view
Re: All authorizations were not finalized by the CA. Hello @Tor Christian There was single attempt to validate DNS challenge on that authorization. After querying the TXT records on validation domain name no records were found.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 3 mths ago
- Questions
- Reported - view
Re: MALFORMED_BAD_REQUEST while renew an expiring certificate Hi @Jozsef Szilagyi Thanks for reporting detailed info and update. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 3 mths ago
- Questions
- Reported - view
Re: Authentication after updating CAA Hi @Stuart Henderson We have identified a bug and deployed a fix yesterday. Please let us know in case you still experience issues getting certificate. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 4 mths ago
- 1
- Questions
- Reported - view
Re: List of ips to allow on firewall Hi FYI: we added support for following of redirects during the http challenge validation. It is now available in production and test environments. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- Questions
- Reported - view
Re: Future features Hi @chin We added support for following of redirects during the http challenge validation. It is now available in production and test environments. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- 1
- Discussion
- Reported - view
Re: Support for IDN Domains Hi @Georg We added support for following of redirects during the http challenge validation. It is now available in production and test environments. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- Questions
- Reported - view
Re: Do you follow redirect when validate http-01 ? Hi @chin We added support for following of redirects during the http challenge validation. It is now available in production and test environments. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 6 mths ago
- Questions
- Reported - view
Re: Support for verifying challenges over IPv6 Hi @Andre Tomt Thanks. Sorry for the late reply. We do not support verifying challenges over IPv6 at the moment. We plan to add support for this during next year. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 7 mths ago
- Questions
- Reported - view
Re: Support for OCSP Must-Staple Hi @Chris Hoye Sorry for late reply. We do not have support for OCSP Must Staple at the moment, but will consider to include it. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 7 mths ago
- Questions
- Reported - view
Re: Keep the same DNS challenge string for renewals? Hi @Captain Mish The value provisioned as TXT record is the digest of key-authorization (see more here: https://tools.ietf.org/html/rfc8555#section-8.4 and https://tools.ietf.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 7 mths ago
- Questions
- Reported - view
Re: Support for verifying challenges over IPv6 Hi @Andre Tomt Could you provide us with more details, like “MDC-correlationId” response header value, which is sent as a response header from our server and also the date/time for the failed…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 8 mths ago
- Questions
- Reported - view
Re: mail and acme-client Hi @22Decembre After analyzing the source code of OpenBSD’s acme-client we found that it cannot be used with our API. Here is the snippet from source as of today: https://cvsweb.openbsd.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 10 mths ago
- Questions
- Reported - view
Re: Future features Hi @fomm While we recognize that international domain names serve an important purpose, we are more concerned about their possible utilization in phishing attacks.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Discussion
- Reported - view
Re: ACME V2 error: HTTP 406 Not Acceptable Hi @Anindya It looks that there is a content negotiation issue on the endpoint to download the certificate. According to https://tools.ietf.org/html/rfc8555#section-7.4.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Questions
- Reported - view
Re: "Certificate won't be issued for more than 2 domain(s)" Hi @Calvin Hoy Sorry for any miscommunication. We support 5 domains in production after a release earlier today. Prior to this date we supported them in test only.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 11 mths ago
- Questions
- Reported - view
Re: ACME V2 - staging vs production behaviour is different. Hi @webprofusion We plan to adjust the test and production environments to have equal features with respect to multi-domain and will update the info on community once this is in place.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- Questions
- Reported - view
Re: Future features Hi @chin We plan to implement following of redirects. However, the ETA of it is unknown. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- 1
- Discussion
- Reported - view
Re: Chain/fullchain file contains unexpected characters Hi @Jozsef Szilagyi Thanks for raising this question and feedback! We have verified our implementation and the chain, as returned from API and didn’t find any divergences from https://tools.ietf.…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- Questions
- Reported - view
Re: v2 new-order failure internal error (with log) Hi @Jay737 Sorry for late reply. There happened an internal timeout in our system during CAA resolution, which took considerable time (possibly because of lack of configuration on the domain to be…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- Questions
- Reported - view
Re: Buypass not sending CAA violation reports (IODEF) Hi @Jamie Scaife We do not currently have any plans to send IODEF incident reports as defined in the CAA specification. However, as this could have value for the wider ecosystem,…
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- 1
- Questions
- Answer
- Reported - view
Re: Support for IDN Domains Hi @Georg We haven’t taken the decision yet whether to enable following of redirects during the http challenge validation. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- Questions
- Reported - view
Re: RFC8555 section 7.3.1 compliance Hi @Attila Sorry for late reply. Thanks for reporting. We plan to fix it. However ETA of the fix is currently unknown. Regards, Andriy
- Andriy Mahatsofficial rep
- Andriy_Mahats
- 1 yr ago
- Questions
- Reported - view

1 2 3 Next

Back to top

official rep

Andriy Mahats

Andriy_Mahats

61
8
1

Follow