Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cannot update challenge with status valid, only status pending #133

Closed
iftahbe opened this issue Jun 5, 2018 · 4 comments
Closed

Cannot update challenge with status valid, only status pending #133

iftahbe opened this issue Jun 5, 2018 · 4 comments

Comments

@iftahbe
Copy link

iftahbe commented Jun 5, 2018

Testing our ACME v2 client against Pebble.

During the challenge authorization stage, pebble completes the challenge and the authorization status is changed to "valid" (according to the Pebble console output) but in the HTTP response we still get the "pending" status.
After several retries, we get the following error:

HTTP/1.1 400 Bad Request
{
"type": "urn:ietf:params:acme:error:malformedRequest",
"detail": "Cannot update challenge with status valid, only status pending",
"status": 400
}

Output of the Pebble console:

C:\Users\iftah.HRHINOS\go\src\github.com\letsencrypt\pebble [master ≡ +1 ~0 -0 !]> pebble -config ./test/config/pebble-config.json
Pebble 2018/06/05 12:48:31 Generated new root issuer with serial 2cb70fcb9d0a40b0
Pebble 2018/06/05 12:48:32 Generated new intermediate issuer with serial 1c9fd2a1f310967c
Pebble 2018/06/05 12:48:32 Configured to reject 15% of good nonces
Pebble 2018/06/05 12:48:32 Pebble running, listening on: 0.0.0.0:14000
Pebble 2018/06/05 12:50:00 GET /dir -> calling handler()
Pebble 2018/06/05 12:50:00 POST /sign-me-up -> calling handler()
Pebble 2018/06/05 12:50:00 There are now 1 accounts in memory
Pebble 2018/06/05 12:50:00 POST /order-plz -> calling handler()
Pebble 2018/06/05 12:50:00 There are now 1 authorizations in the db
Pebble 2018/06/05 12:50:00 Added order "xJnDF8Le3KogZoC5vNqVft-kTqKp8Wu4QhmXJH0zxek" to the db
Pebble 2018/06/05 12:50:00 There are now 1 orders in the db
Pebble 2018/06/05 12:50:00 GET /authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs -> calling handler()
Pebble 2018/06/05 12:50:48 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:48 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:48 Starting 3 validations.
Pebble 2018/06/05 12:50:48 Sleeping for 3s seconds before validating
Pebble 2018/06/05 12:50:48 Sleeping for 1s seconds before validating
Pebble 2018/06/05 12:50:48 Sleeping for 14s seconds before validating
Pebble 2018/06/05 12:50:49 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:49 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:49 Starting 3 validations.
Pebble 2018/06/05 12:50:49 Sleeping for 5s seconds before validating
Pebble 2018/06/05 12:50:49 Sleeping for 1s seconds before validating
Pebble 2018/06/05 12:50:49 Sleeping for 0s seconds before validating
Pebble 2018/06/05 12:50:49 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:49 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:49 Starting 3 validations.
Pebble 2018/06/05 12:50:49 Sleeping for 1s seconds before validating
Pebble 2018/06/05 12:50:49 Sleeping for 12s seconds before validating
Pebble 2018/06/05 12:50:49 Sleeping for 14s seconds before validating
Pebble 2018/06/05 12:50:50 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:50 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:50 Starting 3 validations.
Pebble 2018/06/05 12:50:50 Sleeping for 14s seconds before validating
Pebble 2018/06/05 12:50:50 Sleeping for 6s seconds before validating
Pebble 2018/06/05 12:50:50 Sleeping for 5s seconds before validating
Pebble 2018/06/05 12:50:50 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:50 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:50 Starting 3 validations.
Pebble 2018/06/05 12:50:50 Sleeping for 11s seconds before validating
Pebble 2018/06/05 12:50:50 Sleeping for 5s seconds before validating
Pebble 2018/06/05 12:50:50 Sleeping for 6s seconds before validating
Pebble 2018/06/05 12:50:51 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:51 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:51 Starting 3 validations.
Pebble 2018/06/05 12:50:51 Sleeping for 13s seconds before validating
Pebble 2018/06/05 12:50:51 Sleeping for 12s seconds before validating
Pebble 2018/06/05 12:50:51 Sleeping for 7s seconds before validating
Pebble 2018/06/05 12:50:51 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:51 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:51 Starting 3 validations.
Pebble 2018/06/05 12:50:51 Sleeping for 13s seconds before validating
Pebble 2018/06/05 12:50:51 Sleeping for 0s seconds before validating
Pebble 2018/06/05 12:50:51 Sleeping for 0s seconds before validating
Pebble 2018/06/05 12:50:52 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:52 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:52 Starting 3 validations.
Pebble 2018/06/05 12:50:52 Sleeping for 3s seconds before validating
Pebble 2018/06/05 12:50:52 Sleeping for 2s seconds before validating
Pebble 2018/06/05 12:50:52 Sleeping for 11s seconds before validating
Pebble 2018/06/05 12:50:52 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:52 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:52 Starting 3 validations.
Pebble 2018/06/05 12:50:52 Sleeping for 11s seconds before validating
Pebble 2018/06/05 12:50:52 Sleeping for 12s seconds before validating
Pebble 2018/06/05 12:50:52 Sleeping for 1s seconds before validating
Pebble 2018/06/05 12:50:53 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:53 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:53 Starting 3 validations.
Pebble 2018/06/05 12:50:53 Sleeping for 6s seconds before validating
Pebble 2018/06/05 12:50:53 Sleeping for 13s seconds before validating
Pebble 2018/06/05 12:50:53 Sleeping for 10s seconds before validating
Pebble 2018/06/05 12:50:53 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:50:53 Pulled a task from the Tasks queue: &va.vaTask{Identifier:"ravenclustertestiftahwork.development.run", Challenge:(*core.Challenge)(0xc0424ae140), Account:(*core.Account)(0xc042446230)}
Pebble 2018/06/05 12:50:53 Starting 3 validations.
Pebble 2018/06/05 12:50:53 Sleeping for 13s seconds before validating
Pebble 2018/06/05 12:50:53 Sleeping for 3s seconds before validating
Pebble 2018/06/05 12:50:53 Sleeping for 12s seconds before validating
Pebble 2018/06/05 12:50:54 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:50:54 POST /chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY -> calling handler()
Pebble 2018/06/05 12:51:01 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:02 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:03 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:03 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:04 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:04 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:04 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:04 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:06 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY
Pebble 2018/06/05 12:51:06 authz 1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs set VALID by completed challenge 6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY

And the network traffic capture by Fiddler:

GET https://localhost:14000/dir HTTP/1.1
Host: localhost:14000


HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Replay-Nonce: yYI8vtoBdcy2YgPpKe9BIQ
Date: Tue, 05 Jun 2018 09:50:00 GMT
Content-Length: 302

{
   "meta": {
      "termsOfService": "data:text/plain,Do%20what%20thou%20wilt"
   },
   "newAccount": "https://localhost:14000/sign-me-up",
   "newNonce": "https://localhost:14000/nonce-plz",
   "newOrder": "https://localhost:14000/order-plz",
   "revokeCert": "https://localhost:14000/revoke-cert"
}

------------------------------------------------------------------

POST https://localhost:14000/sign-me-up HTTP/1.1
Content-Type: application/jose+json
Content-Length: 2221
Host: localhost:14000

{
  "protected": "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",
  "payload": "eyJ0ZXJtc09mU2VydmljZUFncmVlZCI6dHJ1ZSwiY29udGFjdCI6WyJtYWlsdG86aWZ0YWhAaGliZXJuYXRpbmdyaGlub3MuY29tIl0sInN0YXR1cyI6bnVsbCwiaWQiOm51bGwsImNyZWF0ZWRBdCI6IjAwMDEtMDEtMDFUMDA6MDA6MDAiLCJrZXkiOm51bGwsImluaXRpYWxJcCI6bnVsbCwib3JkZXJzIjpudWxsLCJMb2NhdGlvbiI6bnVsbH0",
  "signature": "ZsVzHaC3S-Vs8z9osWfEyt7Ja9JXiKIQkqamybd2S3K79UjTtFIWoOtkFwv-q40kRj8ryvtVuMM1vymSryyUOnk4yGkWtNYeRk32F0PXlVCVeF5-MXwB0lrSzQEPVSve9--UUzXIJsI9mEKEk9KBThmi-rXbffE3ooDQ6Vbw_9y4YXLo77zRBzPcAVsyMzxWfNvidlXr62o4-fsDG55d7pzY8B5ZypmQ3Cjd5Ei7cyFs3crFPYFoOAJa-ZfX0jYn7IzbIpfQiTFX_QHPkq5kZtAe7axDF085OPVrSe2O_1L966A6F8aB1j3KO-KqC2UmaR0UlikzNgYyU1TQxcDIgq8q4sBadzdDCwFzHYqm_-f8PKSuCSzCyxnzZjMQf2TGnJEGgjlbMmlA1oVnkiMS82CMKlll5yke2LtV_irzB5-N3ZRRMpRtNPkcD_cfQ4qs2jJzPW4fL-ytSZEXswlpxrbmmT55KfVYARf8zRjaHK7nWWarFYrzw_XxdVLhBMD8ZuAFDJJwE4clWpZ4Fiys1eBxdHmKmnDUcdWn501XIQmP9hVRPYZLq3sUf4MNSdH8uLsVLMJih8p9A_En4ioytuYLr4HaE6PHIXpP--3ZEph3IvEKmXKe5iY_h4Yy1BZTeeeNtyeh7eFRzRdf_G4AJkMv738qfahx-RclktwGw1c"
}
HTTP/1.1 201 Created
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Location: https://localhost:14000/my-account/7a2bb08ca0b4da3d6e85d21a04ce5ed0292aa001e81e492cc4048191f15627b7
Replay-Nonce: 6o8kktGJj4oWo6P3g6I5KQ
Date: Tue, 05 Jun 2018 09:50:00 GMT
Content-Length: 920

{
   "status": "valid",
   "contact": [
      "mailto:iftah@hibernatingrhinos.com"
   ],
   "key": {
      "kty": "RSA",
      "n": "zsgDmLQYUTAaxe6hRQjXbkHKO-uZCFcltA8cpuZZtdveSGIOjqzU_Fd7k9AN4fiSnzLQDZA5VIWP5J5sE1xmoD05mcA3xgIryeVUDtaBpnBHJis1_BMYNRJBO7sHo7YpL-3zyxxC2UsqVFQcT25d4UldKHFVY7b6i-QuPLJmO_TWI3gfnluFJFwtULeV55zkfPddfM7HnxZbXZD3e1F-SFhBZHYuksnzemjMtiCSOFuDOYC7V32k3lY275trXFZWN23t2pxfl3QjwxB6_DMt_USXETL2utqgqez5sxCepDws0TyfyzZ1QSoGYtf3yqHsf4SfD4Exn3R2ZqbmNg_cMcCDf6e1IsHsTY0_U1sEOaRU0LKgNMY9Kjd3gP_bdnJFvq2Wsnte51yQvwEjLsYsupQf60S9s16RGQQ6M3Or_4VCcCEkH50rPj49fqIjJun_Q5J_EGJ4dYqPSPbGz2GyUQMyO6C64N7v62ygtT0mrO8VYxaLKR8IRx2EPB2l1yQm55t-pwypLDG0iJfvrWm2b8BUdaYkpxDEIbwHsuSG-CdrKC9oJH3VJKs48Nls6dt7JeWLgEuRePzlC-HZ-VNHSbZGCs3VEoSkT9U4P5t9QqlKry1DaBbka7-BAcMoicoBUtOgoYCbq_KRu5J89ZhjT93vNlHd8dLxUYQvv9jI8NE",
      "e": "AQAB"
   },
   "ID": "7a2bb08ca0b4da3d6e85d21a04ce5ed0292aa001e81e492cc4048191f15627b7"
}

------------------------------------------------------------------

POST https://localhost:14000/order-plz HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1370
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiI2bzhra3RHSmo0b1dvNlAzZzZJNUtRIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvb3JkZXItcGx6In0",
  "payload": "eyJMb2NhdGlvbiI6bnVsbCwic3RhdHVzIjpudWxsLCJleHBpcmVzIjoiMjAxOC0wNi0wN1QwOTo1MDowMC43Nzg0ODkyWiIsImlkZW50aWZpZXJzIjpbeyJ0eXBlIjoiZG5zIiwidmFsdWUiOiIqLnJhdmVuY2x1c3RlcnRlc3RpZnRhaHdvcmsuZGV2ZWxvcG1lbnQucnVuIn1dLCJub3RCZWZvcmUiOm51bGwsIm5vdEFmdGVyIjpudWxsLCJlcnJvciI6bnVsbCwiYXV0aG9yaXphdGlvbnMiOm51bGwsImZpbmFsaXplIjpudWxsLCJjZXJ0aWZpY2F0ZSI6bnVsbH0",
  "signature": "VoIyxnkcBpVxp50t9ySoBxClNSG6YgFtCq-qEw7SWgaTWghrS1MKkgfnU4ZShebDTJ5B7D7Wg6Mh-SYsxWdozohlZMIE7TzM7oY74AisevXHn9iVzkx5sgnUV0EAiDFP1WZ5mof2-1FZWiCinYHQlLiGkGQo9NhakffxIbsgysBFDGzX7a14npfczufdSVb6yyN7PDagJY1z7YPnMA02Fb4ILWqRFumExFPJcgTXoGHPWkCOstFlp20mdBBrhFSM7-Zxh7UNlotjpB-v3IZxKhAjqmrNKofR2vPymKvbUGWAIpF0Wi8jy75QIeQgCfD6csNLGrloUvBGO5tA_tAUmLsWuhYN_e3poAxs_xRac0dazhnir4Mn5oLzLDlpd2X8NPcGl8bje1aF3He7Rdj1mvwnL6s0ZSZFqSyF5InLuD2OYLAsn5G4Hd7sZ63cKsSkMoTtvdXXqG9vMWLB4yBdukphZ_3EKJ1Txif_fnN-x9cV0mquK_GSBPQS0jNLwNBh3wUo42SQomR2fWjgXXRRQAy80OIc_33z48_WbMv7uLLiyt5sjdR8JMdC5DmnaZ-6aLaMvQftKzGIMVEg8mjtxfWhouDcSswPl1SOcQrOq4J_EzMH9x7TjK3cYiw8hwBfZJgrA7L1N52gsHXhQ0VFT7GOj1hx_ydUtiftkPtgm1M"
}
HTTP/1.1 201 Created
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Location: https://localhost:14000/my-order/xJnDF8Le3KogZoC5vNqVft-kTqKp8Wu4QhmXJH0zxek
Replay-Nonce: NaqDcK-VGeLELApktfITLA
Date: Tue, 05 Jun 2018 09:50:00 GMT
Content-Length: 406

{
   "status": "pending",
   "expires": "2018-06-06T09:50:00Z",
   "identifiers": [
      {
         "type": "dns",
         "value": "*.ravenclustertestiftahwork.development.run"
      }
   ],
   "finalize": "https://localhost:14000/finalize-order/xJnDF8Le3KogZoC5vNqVft-kTqKp8Wu4QhmXJH0zxek",
   "authorizations": [
      "https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs"
   ]
}

------------------------------------------------------------------

GET https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs HTTP/1.1
Host: localhost:14000


HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Replay-Nonce: wXiHH2yvlUFO2liV7lRpdg
Date: Tue, 05 Jun 2018 09:50:00 GMT
Content-Length: 445

{
   "status": "pending",
   "identifier": {
      "type": "dns",
      "value": "ravenclustertestiftahwork.development.run"
   },
   "challenges": [
      {
         "type": "dns-01",
         "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
         "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
         "status": "pending"
      }
   ],
   "expires": "2018-06-05T10:50:00Z",
   "wildcard": true
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJ3WGlISDJ5dmxVRk8ybGlWN2xScGRnIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "ZX6TRR0tlyMJ7rtqRLzcvaY_S7GzCTHOr0iI43HEABfGyx087ZEr3DLxUWr-j3QALBLj_bUQch33WtKw_Fuw8HNYgKTKwnJu-3MKwHK7E6yKil2schMjdi3LgW3ckGbsU-gxJuPyTpVCpaAWwMZOcm-1VQuKDkLSvL0Ca3m6ev4xSV2iVEFsc8LciHdRDu7ZNnc5dHwFinkjxvLzL0oNXL7aEUo7tHk6U0dFe6Az2c8FibXCNe00_yA1Y8Evxsv4xwYGJIdQZ65hEFEDKOgFf6jvOL38aDHd8PYCGF1WXQ0n6eI53ADDZThX4erdY_Grb_sPy552pIdrptWsQ548BgMG0c-3ziVKV3OoGiSM0irtdIXgeNVwUp5OQ3wR2DfM6ubGQQX3mcoaqwwmH7f1xqH0ryq138_PEGwyeOcwz_P1D0NKHfWfzbmECqXDtSxh-5hcmP1rt7Us-qyA0aj0D2eEiggapGgPSh1KYoq93hNJddDOwUEsfmMVb7J3OcnzwD8l6Nrdn93U46iNyqpPx431-H4p9yCN21ECguH7NqBV14o60QbZf0ZNincyHfDoV-RRXrUf-M7vqnRkeV9QdyHzhvvk8iGqxOK-s5IMl5Yr65to-2jM0lYXhWMkv7FVr61JMbsGumCYOMawMPgTcaHxOJES6UA4dgXhUEGCzVA"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: jvDw8p-6XWgfSb1b5rnXsg
Date: Tue, 05 Jun 2018 09:50:48 GMT
Content-Length: 193

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJqdkR3OHAtNlhXZ2ZTYjFiNXJuWHNnIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "ua-GrECItbcNqq04jDQtEc28lSfvSeYN28NtDhtNGsKVQB-gAEJhMANGLABvlvFKa7CCuKpETE5kqIgsl2Jpi0mc1kfJ3EgQ-1jlT7YAh5ZTwMAN-ISgMGpt3Uy2D-yBmaeO_v9tXYGB45aV3-fDtG0JR7WrCeEIBEm8mPrX0s1Lzy7t_ngpV1_pLF1D65_K7FOzqaEkI5ozzsfD__ak-AEe8POkp2Po5nlT3gyXqJeJ_DQubBIvYemDVC-4q04Jt7OhNoqFbAUxJrqqw1m055o8gADbm6_zCGwxk31A0acBA0pp9FWkkCxvzqFObVX6OqQXon46CUP1szHKRfsnWaNozwIIeoP6YkoHeo_8ocg805ogXPhusEXGoS7I-pjw_aW0iqUjJKQ7IB50JOM4VuY_bfuV8U7_tj3GzF_RGQ180hjgpJvoLEzuNio0jexnGtJCxobTpS-eVBwz3jWoneBA_nr8YbfEw8zU52R-MlkGbmdC6bDBHKCvt2o7ItmI3l4GAk_KL_ftv3BdM8fWp58fvnZlr9B7Iz-UX8y6Wcco1EhcjfR-64spOxhY9ppCopYV_H6jCpFKWK7s0hqTFU9UGNEF3BnHJFb4f99BAH81SEGqIMURB0Day4zJV0S-kYNwEjkR8wt_-u8pMSjqsfQhVT0OZ7vTX9TmSfth7hY"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: GKhnzzyxIamq1M_2P9dKog
Date: Tue, 05 Jun 2018 09:50:49 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:48Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJHS2huenp5eElhbXExTV8yUDlkS29nIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "tKoNVYU39JKNYllIXalAzJGYA_oDdp9D70GGHaJMVogFwiP08dUUjJ6r1c3nVowtgFh-npEfC3kYK7Px1PQxgFQZP37VoC0QS5kGkx0Rqk3M05Uoc9hluKUy5f7A0gzURawoU2rCACHFvT6PWAomthe9phZvEnCEpKXkV3nO-AIZC3lE3tYpylvfnN4pjwVoUEXbWqUlZfuN08O4swALq84GwdImpRD0-ISWKGP0oIGHDSN19Vby2p7LCRoQTqOOWsph7xFODagkm-ia5W9_XkwN-RJGrsOp9piPETdoz6sdRe3nQpJFzewO2pDp35Qy4sCMacEk1-4N-tTUKLEwHKQKsMrOOCIn76kbJ4th3QmRK-84KVtVqfwo-Rk8V4u9ieDCInZSbU-LI3AT4u7zr3qaMO21L4NBO_ObYlSuXLk5CQ030O-0H6HYHuimIsAH4JyN0esHyyyEjq58mWogeTnSe1nyqRMGoZVtj7DiQQxCIn2CzxGB47cloJO_nXPixdSaD8RHymfz2YCnU9vWG5SOZTxl-EsRcsN32bo7I_gdWecILRNJb4NaiCpXK9bsdxQpTE16l5jjvIjcMqDXIjx3pXs-tOfO6x-8TSC5J0DAHWa5xrIgO7svuUvsV-xXHaTvPNNnEMbRosyJQKdCsS4spYDu30YsymC7ZBraLVM"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: fbJ3CRdFVAIu5O3upx623w
Date: Tue, 05 Jun 2018 09:50:49 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:49Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJmYkozQ1JkRlZBSXU1TzN1cHg2MjN3IiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "FSn3UBe7n35tCAKvfyx3qnEuKBox4cAuy6mhqQe0arl47R5YPqcesX9ltTgjp6K6eebqUbY6zsF1aDL9oYjmcYbSuudEsB6bPS9tS0ZFg_4DQ1oAuN_NVoaPjb659apPrUe_xM4D2tL401SZbYvXuHYrRbijMLlWbbCV8_XT7_Dme9YRzQG4MRUaY4ULH6UeySOgD9q5Pz77Y40DFMzfjd5g9Px0XHLW-d1pzTeiEh9byL4iy_Bi47bQDIFCQNOWifHDCKvEq4Ft3gi0ypbZ75p061-XHn2HGxt9fEm4SMByfdoWDwX6sfE-e3LDWk3H4H5vOxl4irBcKyKwM_iGJjFYgLzWq8dL-Jt1K7vavTSL0WvHB3fnest2Y4voB6U7iGS4Tcl4MPvMEmUaCExcoLmAJjSBrTjX5HMWzv7piRTPlkCkou478jZHy_F0EgVppqxcEGu9aaq7Yh-13P5l777_11GREFr2cg47ThO41JOflQ4KggdUBmu7FIF7TmGKEIu7K2Sx6WOLmZ_tlG3wMQAfG2G-aun-qiZCveanY5wgwU8bgQQCOQEQjXqDas0sg4O-iozsKuaLCZrd2UI1Ez-a1iv27jnseFlf7xxtKP7BtAuU8oYw50UPyNEzvhKiMe8QPozh7-RkWzfZZ6bc6hmTJ90ATyyOAROYCsHxUSc"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: uOI46FmVupbQk1aKIibOAg
Date: Tue, 05 Jun 2018 09:50:50 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:49Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJ1T0k0NkZtVnVwYlFrMWFLSWliT0FnIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "Eu9IKLKM4r91FxAy_PrJwzubhc2WUgQwAFiFFEDbxtZse1DtCsQs1_RziOhUieXLKe8obOWomkjf7iY6Dpkl4dpGVdjXEgAQM5WEoWoSJlttzN9A9mM4tQAMnMbSOYIspdUacclW5DzRFB3ddpKSeJVxLmCfvf5MjPpJdziQU-ZESBeame4RHJSMsYwWFtMbnEFwHRBAJvQh71rKKXn4_Vsgq0vsJfPTcVBZjVZzDFbf5u2dSkhCR8CU1s0OdkTiWsnQ4T54_owXT-TlYRMAFroDPU9h51bpmYgdZBTEyIO00HMgxrmK_AcduU5UZnjLvWbMT3_cP6-3pwIeW70ocTaL6yEDspCi_vm0nJhlYvXKjIpu-pP5UD9QbOTmOfbXCaTaGXtyiR5mBHsCePU_8dWmkqnJ_35N1kSckcFXvKV98CQ6P9P70IEnoeZVV0NPeV0389nb4DLEUgwxtWx4gC5B1LkyqCxPv2sTPq7f47y2CEcQHEFAtFvxgefJ-iKXndhohx-Yz20I9qVM98h97MDwLWnQqMCuGaVNYaNCCBq318T8M6RzulZxeeRaWcJq3protupDg1DZaCsWnVJd3LeXac45IJcIK7iKQSpyWpMmFl_7rvDD3Gvmi-FDImyGu3eDBAQBiUZoE64ub9jSX1pQv9DtHZQu9zb6OkyM4dM"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: lh0-k4Fzf8GfO3OkIQZFBw
Date: Tue, 05 Jun 2018 09:50:50 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:50Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJsaDAtazRGemY4R2ZPM09rSVFaRkJ3IiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "wc4mXtWq38lJLnhhLY8ZX140QJYmGZQr8m7PbWETPg2sBKzqxdM4wb-133GSBc0ljhmcffu1CEmunhQ6clzq1WxocQbncNE80Zg6j59mSfkeOUO2G2tS8lWUQgZ8eEk40esRpjAe27pa1dKT-5UTWcPXSRwYEbkvMQQErorzoZ_77JywNbRwFZErdgJ-Q1HuCj-s70D-aXk5LQRW70Yle5mWXM31fLDx4AfmAQTzmLv3P68Lqkp2rpcd5wz_Kie4gqt1Ecde2EAMk9h1HSgohxq_ESYLmEappUpKWcbXNRRuyrXNNjFwcC-VZj5EKSM1TV1wxOVxIwsfQgJCwwVBm5DWYN623oBl_Gr6bwgjXKMp2AVl1bue1Lu1yWrZ7DKzYr11LhZm_13MscfSPzt7i73kWeT-CNMAkWHwHsJpR15Sufy6f_i6j9jfa6ZNekVfqV3Fo1lEghoW9xu54fg18uWp2sMq8FxRokfLwz--5b-J6ImGjS_DoGgQTMqajED7Nz8H00ot6A3NAhjfTVKGXlPhVOGqMS-UcNLQ-RrYVZJdESVk-ePYc8YqzIEpim-W7XZa0_sFV0mIECng8WvN8VBDjTgwIhYnK1SR5rwmEffO6ctNO01TUcqRFgGMV0g0O28-AVpC-bzh_7gxX7aZwl9AjwhAti_cIp9bIn98zq0"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: HfUZei38dF2ZKNKJVgifXw
Date: Tue, 05 Jun 2018 09:50:51 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:50Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJIZlVaZWkzOGRGMlpLTktKVmdpZlh3IiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "InHxy_n3O1siV4-fKGkOe9TY2eu38iVLtXQBChIQM52MaE8redAneRan-4mB4hMP8cw0RZ2rObRJA6MO8a48GZH2Gs5echMIErSXTZWb9hVwt0S5anKTG7Kc4-yyTraXmWNrxCPfiVout5VNEf_pgybSyceN7ILMRFYoqEIV8filu0xDuJVfQCAJIxP-UKK-9SZurnNCquWzTTsJdvDGz95W60ZnAH7pnd_B25s-nYlT4Z1QubyZP_n_JgCgs37RvslXQlpU7heCa4iYuNIn3zk4JY49EWtIoS6AOeHzu9kVfKXE1Dxxd77jlwaY7zMbZ4jymK3qhtMKgcrzhyJ8gk73wK5qLsEY77lOqXob9uT9O0mBpeHlIpqC-Sh5xmJPVxN6NH8beTCXoAfcE4r7GiQ7qJ6rX3ejsWXJdnDNeyrutY-drPZ9Wytxr9DkCLi7QuYZWWpbKSeXeeqloFaXH1lqOgmr8d0VEgMQJk8kqFINTrgKIOlAPy2UTNTPei0KhJ0gHSevfqC3OxMgwaHJFWGuIdGZ3vbpAQAskaC8Gl695PS8mvDZkO8nIrCv_ccQJGgDmtUfpXGTpwi_p9JFYxAlLj5FZ2b5GwArYNKJ4brKyuQavdT9aTEnHuhxBO8QCKUCyHbLgLnhxmQZca6kqOwAeBvf9dbDFu-YmdN-EhA"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: Na2pLKKZBv-K4nDV0rHW0g
Date: Tue, 05 Jun 2018 09:50:51 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:51Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJOYTJwTEtLWkJ2LUs0bkRWMHJIVzBnIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "p0bPDkGbPtmgx9UWLCw351-bSCcvdK47gu_XHgCB1-DbX28GPvMyWLsOvRCdtY-2tqS3vRlT-IPQ89RtWeenmBdRe7piCHgHyhMTpZW1AKW9BjHYF-tfPh3-vLCrOLZdKIh0-QSr3UxkvwcpaXw615i4qdm52yl228oE0PNT4DX9oFdzPKFu0n38PU97Bao6SNX6hCPyHIWKIQcKZbp8OYoXrdjsoDbh3iM5dQHqVf1x-kWkqzrUaxAtSAlEyhMXzOLTxflbhlTGzCLcOuVmajCBadF6LwDDhGqiqJ6fw-zHBz-NqAtMxNvd5zaJkcoR-dH6RiwXctYXFJL8EL3pDlJyeLrv3pafKruuV5YWGXSeQRS2j1reFKDBIPg6jQMxhJ36kV6ptr_JU46RemJRUl41N4b1miIODCn0QDgUvJmi6adtq_dAF0XMFKyas4LolMfhFyYPsZN7ogsBT-8WOfM03yv91ZlSTERa1RJWE0DtA7fb4h86kM3QAKgRG9gcaY_PE9eVVqipqQyf9Htybw_TZgZMkDhZrcZJPXlZk_JpLY6at1Ad4TrskEm8AS4463iJT8XcOr0Z1G5Zs9rlQIc_Pon6eXrO07IdVmOpA07HhUAtKYBI92hhXynmDQwiCn9W1G1wm_jq0QOFXPlP1N5q5SqdRbLB7iWpZ-6cj2s"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: EVSi_Uu0bx0-LR71K_vdug
Date: Tue, 05 Jun 2018 09:50:52 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:51Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJFVlNpX1V1MGJ4MC1MUjcxS192ZHVnIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "AmTSfqO59mpn-objy6foSaSjWQL0n_eWdI6Rt2W0niLvfE8n012OcdY3H6A1NWFQiUe_QP-aHcIsQtv8HOmWQrw7Cnb44rumAbY3KF_yVWuHdu9_zF_dVC5EpCm-82YMWjkPb8UaT4uyBIIh2OlFqC76OV52pr5xpDQrQ6Y8QUuEgKlsZOA0TkREmBY3WXgcddoXyDLLYj5vEDoEI5-Y3XFhGv1aGlgMIbAUF2huZLR4K5mEYUw0WK3tFUOYc1_DTdFhfp5YHGxKnJzLYgoRsYi5UWeBQDGDkzwEPFW9Csik6rRUsBpNEeQfBQxd4J3FsdfH3foKZ8XA-AUWo3e8mFzf_Smu2h7gV2kfRBmk1GphKG35WKNrvecCkdoqFFfYfrWUJ5AtTymnyL-nLvXx-aOIwAN7uQxrCVkDg4cVqvRgTGYZyFY6cLFOnRc2bXJ3LvIFZo4E7ayT4Ci2tRdnRugSQ_HCzaFq5EAqer_MeDUtc-JmYguDEn3G9tXVdWmpz7tsqRPnyBKCx7tWQOASntFUI6vYhDS86VwV44F1wGNanpGIM_21haPVz3AiwGkc-JzUy4hPS132TWPiva-icUFVSiwIy5rmLZD2no1gM0kNBj4KOoePbmqVRdQC3CzBEGLWksLWczfIL6W5UkQbL3LIuahtBhhzayA1Q6HU55Y"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: qDMxUARHNaRlq_XcHFd7Tw
Date: Tue, 05 Jun 2018 09:50:52 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:52Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJxRE14VUFSSE5hUmxxX1hjSEZkN1R3IiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "p3FpkghO6-g3S43qJxKBr2OJ_UADYLjrZS1yyEwYfdLlFxMRjk2nzmLkXNOBYpWbmQP8vQTJbWsRRSl2ZgSLQ-CLzpu4JKKud-A8Z01OV21_ItJ4C_GBjxpDPLw9fFQFeXktxSV7KGXnk4TzVL4npweDDiX00AaehdFqg_WCaRmlMyiABhenxX35iMncJFzfBTjxKehvzBCG2o-F_cfKakC6y6LsgZEasgI7kVDcaIwRZnXDm0lX1jrek0PYJPEcqrdQCCreVL9y-Gom6XXg5MdCDZYC-VRP92yWHwvBRj9jaSaCv-bwWoyeRJRM4S507TPQk3Q2f24QX-q7Oj-duxNDrUvhwGwBoIMRlm3dlpRvbqedg_gvkwXzwd4-jpv8ycGgktohtQI6ymdUIPcOzmmhrxfcB_AyOnDpnl5lWTo_5q6ibkxgD8i4GCJsj_7aQmw3vDNhlo2vQhS0IBLn9TAqMaze1CzoxUmtJPgFfzmjbccElyqTLgDJW8UZjZf78JvQWKekIzi7jD7d96rDrKCLa16JVF97pwKUFwufzyCeS0Vze8GlS-ksQdj5ZNdZ4-j8lqzbPsaY6eMQW46CjUfgf0KA_I6yHiGyHRD5DqXv9Ct1MnjhRs9j_43bBRfjTqRtYrgz5e5AApN1UHBJDN8K56zi6rqZyhp1hDDpVAU"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: nZUkMY9WzCPPAWpcjk9aZA
Date: Tue, 05 Jun 2018 09:50:53 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:52Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJuWlVrTVk5V3pDUFBBV3Bjams5YVpBIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "BYRk2ID_8_9b1sO_dLjWQFia_rVTYjEWSYljxdDt6bH5RB16QVlXxgUzJ8ByvT8oYdpBUvnAIoq1qLYzzJB9jPRuLJgvS3GcIcqZe2_6sHOJ6FOnjc2RUxNdZQtI9cl8dt1zcb4zlWunAxKmhK6l-P17_4nH52ddkualTZVNF2QplMC7334N2QDrQ6rcPRc-2WidrLv9zrpTVoNLLZXKhrJ6Cp_DXvDHC_Pq-_6rlaxc0q2Y7O_jqBRP-EBuCkIcavOBBKq1dPnqEVMySDL3ov4jOHRGhFYO4fqoO1MWirLyyzpn9bbS3gNog_6DkCgYMaJjfa6yG9YJcYCUpu_hwxkFYmv0erxkK513PKcbVj688lvO65g5r_JUL0Qx26fctqPUMAxtaNcxDnHVSWHQb1pX6E569zYy8L-VMKzmn3HoK_p_OudWQqcqp0zi7kss3YOqN69iruGxoRDf837m5XViWFcp5WRNdwVbWXIUmTXwJ3FrJ_0Nkb5-8uwtaBOCuAy1GBMf82Ne64qETNOHmxYH7knBvd5OOms195Bgol3dJCqyiJ3-C2l-1HcBFbFp0Rhlou7PYeganNavL-5TLEScqDk6Fw68RnWt9oq7dKKiPulU7IQ15-nmaKCdD88Kg2PAfdjBJtu2JvAhpXsJaYYVt1vYKHQvd0U0Kmz-q4A"
}
HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json; charset=utf-8
Link: <https://localhost:14000/authZ/1_eRzXIKRmpAjsnLJolkluQOojF6qfMC154cSbZnyqs>;rel="up"
Replay-Nonce: B-lBSAqIY2vd4YUz4NGlng
Date: Tue, 05 Jun 2018 09:50:53 GMT
Content-Length: 233

{
   "type": "dns-01",
   "url": "https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY",
   "token": "kdqJ5zMxdi0pDrtIkPonUkKtirea8tnIm2t4qx0BopY",
   "status": "pending",
   "validated": "2018-06-05T09:50:53Z"
}

------------------------------------------------------------------

POST https://localhost:14000/chalZ/6jI9G-lXt4dEmFaNV9xLtdKexuLsDM6yp4DIVJ6BknY HTTP/1.1
Content-Type: application/jose+json
Content-Length: 1223
Host: localhost:14000

{
  "protected": "eyJhbGciOiJSUzI1NiIsImp3ayI6bnVsbCwia2lkIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvbXktYWNjb3VudC83YTJiYjA4Y2EwYjRkYTNkNmU4NWQyMWEwNGNlNWVkMDI5MmFhMDAxZTgxZTQ5MmNjNDA0ODE5MWYxNTYyN2I3Iiwibm9uY2UiOiJCLWxCU0FxSVkydmQ0WVV6NE5HbG5nIiwidXJsIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MTQwMDAvY2hhbFovNmpJOUctbFh0NGRFbUZhTlY5eEx0ZEtleHVMc0RNNnlwNERJVko2QmtuWSJ9",
  "payload": "eyJrZXlBdXRob3JpemF0aW9uIjoia2RxSjV6TXhkaTBwRHJ0SWtQb25Va0t0aXJlYTh0bkltMnQ0cXgwQm9wWS5tMGhCa3hyczNobU9fMC1aSUJteU05blFCamRNc1lqUW1KOXJPdzJjc0NFIn0",
  "signature": "O5TUjAKz5TbLUqIlEFOrqlW2whX6ZLyDNzIpRXCgtnRJR0l1eLoBI5wRRMjqygLWgEdAdAv5gf_6VhMyvwVvDYyhctYV8qnI0P72__JjaOR0sI_xBS9G2yf2UQSSEzMAAq8GeSNiaNbnzy_nfY2MqXIJCbPTMumRfl7v5-RbiGjMuiza4fS5vxNg_M7I-_LRzc_Fjr5YVrmXim0L4JEO9D-pFrF_cO9WMibnB6hyTUrrztb7Vjj2df8Xe5z_2D24xMhNskN-yV4L_gJQNkbAfFRo_M71eNrVqHaffBvUwUHwCvnKKb55lC7vf_te0bBuui1-HDTzof0Oj73PCl4YN5_p3o1RJfecoank4fMAB66ZTBH0-7u9SlNHrGN15_GGP4_xWigtAIZ4bfSJDdESW1arsNeHLm7ky-knP008SzscAevQsXJ5kHx4eY-XDmu1ogg_9BvLvd0Jsv9OQ3D0BHMis8SQu4nUfnjIp2xA4FwLT8NLeKwUW6O8V6Yv8U1uWvoifCzRVh3aS4HI7rRbh5IStD8h49QmjgIUZ6pw7cgQCV-aVlYh6xQRU0O9c_Yq8CemM9vRrGVLuwwr_qBQGpNQkySIeLp-9tFJvTv-NaahDMXeYjYhOdezKz_tCkaSGqzMtCqzr8yFyImFDJK7GBZHFuCcIJ_XD5H9k7G1Cxg"
}
HTTP/1.1 400 Bad Request
Cache-Control: public, max-age=0, no-cache
Content-Type: application/problem+json; charset=utf-8
Replay-Nonce: cLtemededPyNjzqWBQUoaQ
Date: Tue, 05 Jun 2018 09:50:54 GMT
Content-Length: 157

{
   "type": "urn:ietf:params:acme:error:malformedRequest",
   "detail": "Cannot update challenge with status valid, only status pending",
   "status": 400
}
@cpu
Copy link
Contributor

cpu commented Jun 5, 2018

Hi @iftahbe, thank you for the very detailed bug report! I appreciate it :-)

During the challenge authorization stage, pebble completes the challenge and the authorization status is changed to "valid" (according to the Pebble console output) but in the HTTP response we still get the "pending" status.

Based on the Fiddler trace & Pebble output it looks like you are:

  1. Creating a new order
  2. GETing the order
  3. GETing the order's authorization
  4. POSTing the authorization's DNS-01 challenge
  5. POSTing the authorization's DNS-01 challenge
  6. POSTing the authorization's DNS-01 challenge
    ....
  7. Eventually getting an error about updating an already valid challenge.

It sounds like you wanted to be polling the authorization to see when it has changed from "pending" to "valid". This should be done by sending a GET request to the authorization URL. Instead, it seems like you are POSTing the challenge over and over - each time it returns "status":"pending" because it is still pending from the initial POSTs. After the first validation completes the status changes to "valid" and then any additional POSTs to the challenge return an error "Cannot update challenge with status valid, only status pending".

E.g. I'd expect the flow for a single identifier order to be more like:

  1. Creating a new order
  2. GETing the new order
  3. GETing the order's authorization
  4. POSTing the authorization's DNS-01 challenge
  5. GETing the order's authorization (Repeat until status != "pending")
  6. POSTing the order's finalize URL if the order's authorization is now "valid"
  7. GETing the order (Repeat until certificate URL is present)
  8. GETing the certificate URL

I don't think there is a bug here. The error you are getting from Pebble is the one I would expect to be delivered to a client that behaved like yours did in the logs :-)

Does that make sense?

@cpu
Copy link
Contributor

cpu commented Jun 5, 2018

FWIW: Starting Pebble with PEBBLE_VA_NOSLEEP=1 should make this even more apparent: The first challenge POST will result in a near-immediate change in the authorization from "pending" -> "valid" and you will see the "Cannot update challenge with status valid" error much sooner as a result.

@iftahbe
Copy link
Author

iftahbe commented Jun 6, 2018 •
edited
Loading

@cpu Thanks a lot for the explanation.
It makes sense yes, I tried to get the status from the challenge itself and not from the order.
I will make the necessary changes :)

@iftahbe iftahbe closed this as completed Jun 6, 2018
@cpu
Copy link
Contributor

cpu commented Jun 6, 2018

@iftahbe Great :-)

It makes sense yes, I tried to get the status from the challenge itself and not from the order.

Just to clarify quickly: you can get the individual authorization's statuses as well but you should do so with a GET request and not a POST.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@cpu @iftahbe