• Marcel Hellkamp's avatar
    fix: Challenge not skipped for pre-validated wildcard domain orders · 09569790
    Marcel Hellkamp authored
    Some CAs auto-validate orders based on account-level rules and do not
    require a challenge at all. Sectigo introduced a non-standard challenges
    named 'sectigo-dns-01', presumably to work around this issue in certbot.
    This also works for non-wildcard domains in acme.sh, but wildcard domains
    are rejected because acme.sh hard-codes 'dns-01' as the only allowed
    challenge for wildcard domains, which is not offered by Sectigo.
    
    This change simply moves the '"status":"valid"' check up a bit and ignores
    challenge type mismatches or missing tokens if no challenge is needed anyway.
    09569790
acme.sh 211 KB