-
Notifications
You must be signed in to change notification settings - Fork 1
对比本项目与 RFC 8555 出入的地方 #3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: rfc8555
Are you sure you want to change the base?
Conversation
xiaohuilam
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
comment all changes
| */ | ||
| class AuthorizeCommand extends AbstractCommand | ||
| { | ||
| use KeyOptionCommandTrait; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
因为 csrEager 需要生成 KEY
| ->setDefinition([ | ||
| new InputOption('solver', 's', InputOption::VALUE_REQUIRED, 'The type of challenge solver to use (available: http, dns, route53)', 'http'), | ||
| new InputArgument('domains', InputArgument::IS_ARRAY | InputArgument::REQUIRED, 'List of domains to ask an authorization for'), | ||
| new InputOption('country', null, InputOption::VALUE_REQUIRED, 'Your country two-letters code (field "C" of the distinguished name, for instance: "US")'), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
因为 csrEager 参数需要
| $solver = $solverLocator->get($solverName); | ||
| $this->debug('Solver found', ['name' => $solverName]); | ||
|
|
||
| $alternativeNames = $domains; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
生成 CSR 的逻辑. 初始化订单时候一起提交
| throw $e; | ||
| } | ||
| } | ||
|
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
挪到 Trait 和 initializeOrder 方法共用
| $client = $this->getClient(); | ||
| $domains = array_unique(array_merge([$domain], $domainConfig['subject_alternative_names'])); | ||
|
|
||
|
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
生成 CSR
src/Core/AcmeClient.php
Outdated
| { | ||
| Assert::allStringNotEmpty($domains, 'requestOrder::$domains expected a list of strings. Got: %s'); | ||
|
|
||
| $humanText = ['-----BEGIN CERTIFICATE REQUEST-----', '-----END CERTIFICATE REQUEST-----']; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
将 CSR 内容转换成 UrlSafe
| $response['url'], | ||
| $response['token'], | ||
| $response['token'].'.'.$base64encoder->encode($this->getHttpClient()->getJWKThumbprint()) | ||
| isset($response['filecontent']) ? $response['filecontent'] : ($response['token'].'.'.$base64encoder->encode($this->getHttpClient()->getJWKThumbprint())), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
因为 trustocean (comodoca) 的验证路径/文件名/内容不一致. 特意加上的补充参数
| { | ||
| return sprintf( | ||
| '/.well-known/acme-challenge/%s', | ||
| $authorizationChallenge->getPath() ? ($authorizationChallenge->getPath() . '%s') : '/.well-known/acme-challenge/%s', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/.well-known/acme-challenge/ => /.well-known/pki-validation/
|
|
||
| public function delete($path) | ||
| { | ||
| return; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
keep un-deleted. because when program run here, comodo is not verified for certain yet.
| * @param string $filecontent | ||
| */ | ||
| public function __construct($domain, $status, $type, $url, $token, $payload) | ||
| public function __construct($domain, $status, $type, $url, $token, $payload, $path = null, $verifyurl = null, $filecontent = null) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
文件内容/路径/文件名有特殊要求
Adding Gandi.Net DNS solver class
Adding Gandi.Net DNS solver class
…-solver-aliyun
Feat solver aliyun
Fix test and add php 7.4
Added orderNotReady error type
Fix the wrong return type
Split Sign and Request
Fix getIssuerCertificate return type
No description provided.