[Acme] I-D Action: draft-geng-acme-public-key-07.txt

[[e-mail]]

Internet-Draft draft-geng-acme-public-key-07.txt is now available. It is a
work item of the Automated Certificate Management Environment (ACME) WG of the
IETF.

   Title:   Automated Certificate Management Environment (ACME) Extension for Public Key Challenges
   Authors: Feng Geng
            Panyu Wu
            Liang Xia
            Xin Chen
   Name:    draft-geng-acme-public-key-07.txt
   Pages:   56
   Dates:   2026-06-14

Abstract:

   The Automatic Certificate Management Environment (ACME) [RFC8555]
   requires a PKCS#10 Certificate Signing Request (CSR) at the
   finalization stage.  This document defines a new ACME challenge type,
   "pk-01", that allows a client to prove possession of a private key
   directly, without constructing a CSR.  The primary motivation is to
   support key types that cannot generate CSR self-signatures, notably
   post-quantum Key Encapsulation Mechanism (KEM) keys.  The client
   declares the public key via a popKey field in the "newOrder" request;
   the server attaches the "pk-01" challenge to existing identifier
   authorizations.  When all required authorizations are satisfied, the
   ACME server issues a certificate using the validated public key and
   the authorized identifiers, eliminating the need for a CSR in the
   finalization stage.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-geng-acme-public-key/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-geng-acme-public-key-07.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-geng-acme-public-key-07

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts