Disable `wire-dpop-01` and `wire-oidc-01` by default

5 months ago · 8997ce1a1e
parent bf8c17e3ec
commit 8997ce1a1e
1 changed files with 1 additions and 1 deletions
--- a/authority/provisioner/acme.go
+++ b/authority/provisioner/acme.go
@ -304,7 +304,7 @@ func (p *ACME) AuthorizeRenew(ctx context.Context, cert *x509.Certificate) error
 // Challenge provisioner property should have at least one element.
 func (p *ACME) IsChallengeEnabled(_ context.Context, challenge ACMEChallenge) bool {
 	enabledChallenges := []ACMEChallenge{
-		HTTP_01, DNS_01, TLS_ALPN_01, WIREOIDC_01, WIREDPOP_01,
+		HTTP_01, DNS_01, TLS_ALPN_01,
 	}
 	if len(p.Challenges) > 0 {
 		enabledChallenges = p.Challenges