[Acme] [Errata Verified] RFC8555 (6364)

RFC Errata System <rfc-editor@rfc-editor.org> Fri, 22 March 2024 14:57 UTC

To: ekaratsiolis@mtg.de, rlb@ipv.sx, jsha@eff.org, cpu@letsencrypt.org, jdkasten@umich.edu
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: debcooley1@gmail.com, iesg@ietf.org, acme@ietf.org, iana@iana.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240322145721.C3A495BDCA4@rfcpa.amsl.com>
Date: Fri, 22 Mar 2024 07:57:21 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/EdopHrdGGK7hPv5ureDH7xNROHc>
Subject: [Acme] [Errata Verified] RFC8555 (6364)
Precedence: list

The following errata report has been verified for RFC8555,
"Automatic Certificate Management Environment (ACME)".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6364

--------------------------------------
Status: Verified
Type: Technical

Reported by: Evangelos Karatsiolis <ekaratsiolis@mtg.de>
Date Reported: 2020-12-23
Verified by: Deb Cooley (IESG)

Section: 7.1.4

Original Text
-------------
wildcard (optional, boolean): This field MUST be present and true
for authorizations created as a result of a newOrder request
containing a DNS identifier with a value that was a wildcard
domain name. For other authorizations, it MUST be absent.
Wildcard domain names are described in Section 7.1.3.

Corrected Text
--------------
wildcard (optional, boolean): This field MUST be present and true
for authorizations created as a result of a newOrder request
containing a DNS identifier with a value that was a wildcard
domain name. For other authorizations, it MUST be absent or
false. For pre-authorizations, it MUST be absent or false.
Wildcard domain names are described in Section 7.1.3.

Notes
-----
This section states that the wildcard field must be absent for other authorizations, but the example in this section has an explicitly set wildcard field with value false. The proposed change allows both options, either omitting it or explicitly setting it to false. Also a sentence has been added to explicitly describe the behavior for pre-authorizations.

--------------------------------------
RFC8555 (draft-ietf-acme-acme-18)
--------------------------------------
Title : Automatic Certificate Management Environment (ACME)
Publication Date : March 2019
Author(s) : R. Barnes, J. Hoffman-Andrews, D. McCarney, J. Kasten
Category : PROPOSED STANDARD
Source : Automated Certificate Management Environment
Stream : IETF
Verifying Party : IESG

[Acme] [Errata Verified] RFC8555 (6364) RFC Errata System