Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
ACMEv2 - Errors during finalization leave order stuck processing. #3403
When a user POSTs an order's finalization URL the RA eventually invokes
This can also happen in the case where the order isn't fully authorized yet. We set the order to processing before
The most conservative answer is probably to set the order to an invalid status when this occurs and require the client to submit a new order that will reuse the valid authorizations that existed from the failed order. Allowing finalization of already processing orders breaks the semantics we established for RA->CA order processing. Switching the order back to pending also seems fraught with potentially significant consequences. This is Yet Another fun side-effect of order based issuance :-(
Relates to #3392 - the transient errors specific to the staging env cause 500s during finalization and can provoke this problem.