1

Do you follow redirect when validate http-01 ?

I have web server that open both port 80 and 443 but always redirect http to https and it seems not work when I try to issue Buypass certificate  because of this error

 

Error, can not get domain uri. "type":"http-01","token":"A9631791AB5188190C9CBDC57E8B2533660E8DE4","status":"pending","validated":"2019-07-20T19:43:44Z","error":{"code":0,"type":"urn:ietf:params:acme:error:connection","detail":"The server could not connect to validation target"

 

According to https://tools.ietf.org/html/draft-ietf-acme-acme-14#section-8.3

 

The server SHOULD follow redirects when dereferencing the URL.

 

I believe it should follow http to https and validate ?

Could you please check ?

3replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
    • maov
    • maov
    • 5 yrs ago
    • Reported - view

    Hi.
    Currently we are understaffed do to holiday vacations, and I'm not currently sure how we handle redirections but after the holidays I'll get back to you with an answer.


    But please validate that the new FQDN you are obtaining a certificate for will be accessible through HTTPS.

    Otherwise I would suggest using DNS-challenge or using a temporary vhost for the web server to handle obtaining the certificates for HTTP-01 challenges without redirection in the meantime.

    Best regards.

    Andriy Mahats  Could you answer this question in regards to redirection from HTTP to HTTPS?

    Like
  • Hi chin , Magnus

     

    Our implementation does not follow redirects.

     

    Regards,

    Andriy Mahats

    Like
  • Hi chin

     

    We added support for following of redirects during the http challenge validation.

    It is now available in production and test environments.

     

    Regards,

    Andriy

    Like
Like1
  • Status Answered
  • 1 Likes
  • 4 yrs agoLast active
  • 3Replies closed
  • 282Views
  • 4 Following

Buypass Official Community

This is the official community of Buypass.  A Root CA located in Norway.

Sign-up using free email domains have been blocked due to increased spam. https://community.forumbee.com/t/63zsyt/blocked-email-domains