[Acme] [Errata Verified] RFC8555 (5729)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 11 January 2024 14:07 UTC

To: rob@sectigo.com, rlb@ipv.sx, jsha@eff.org, cpu@letsencrypt.org, jdkasten@umich.edu
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: rdd@cert.org, iesg@ietf.org, acme@ietf.org, iana@iana.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240111140736.A6A901A2161B@rfcpa.amsl.com>
Date: Thu, 11 Jan 2024 06:07:36 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/acme/ahSvgcNEjXVkTvwTzEP77lBAQ0M>
Subject: [Acme] [Errata Verified] RFC8555 (5729)
Precedence: list

The following errata report has been verified for RFC8555,
"Automatic Certificate Management Environment (ACME)".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid5729

--------------------------------------
Status: Verified
Type: Technical

Reported by: Rob Stradling <rob@sectigo.com>
Date Reported: 2019-05-22
Verified by: Roman Danyliw.com (IESG)

Section: 7.5.1

Original Text
-------------
The client indicates to the server that it is ready for the challenge
validation by sending an empty JSON body ("{}") carried in a POST
request to the challenge URL (not the authorization URL).

Corrected Text
--------------
The client indicates to the server that it is ready for the challenge
validation by sending a POST request to the challenge URL (not the
authorization URL), where the body of the POST request is a JWS object
whose JSON payload is a response object (see Section 8). For all
challenge types defined in this document, the response object is the
empty JSON object ("{}").

Notes
-----
It's clear from other text in section 7.5.1 that the "empty JSON body" is interpreted by the ACME server as a "response object". (The first function of this erratum is to clarify this point).

Section 8 says that "The definition of a challenge type includes...Contents of response objects", and section 7.5.1 notes that "the challenges in this document do not define any response fields, but future specifications might define them". (The second function of this erratum is to permit clients to send response objects that contain response fields).

--------------------------------------
RFC8555 (draft-ietf-acme-acme-18)
--------------------------------------
Title : Automatic Certificate Management Environment (ACME)
Publication Date : March 2019
Author(s) : R. Barnes, J. Hoffman-Andrews, D. McCarney, J. Kasten
Category : PROPOSED STANDARD
Source : Automated Certificate Management Environment
Area : Security
Stream : IETF
Verifying Party : IESG

[Acme] [Errata Verified] RFC8555 (5729) RFC Errata System