You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
smallstep-certificates/api
David Cowden 9af4dd3692 acme: Retry challenge validation attempts
Section 8.2 of RFC 8555 explains how retries apply to the validation
process. However, much is left up to the implementer.

Add retries every 12 seconds for 2 minutes after a client requests a
validation. The challenge status remains "processing" indefinitely until
a distinct conclusion is reached. This allows a client to continually
re-request a validation by sending a post-get to the challenge resource
until the process fails or succeeds.

Challenges in the processing state include information about why a
validation did not complete in the error field. The server also includes
a Retry-After header to help clients and servers coordinate.

Retries are inherently stateful because they're part of the public API.
When running step-ca in a highly available setup with replicas, care
must be taken to maintain a persistent identifier for each instance
"slot". In kubernetes, this implies a *stateful set*.
4 years ago
..
api.go Simplify statuscoder error generators. 4 years ago
api_test.go Add context to tests. 4 years ago
errors.go Move api errors to their own package and modify the typedef 4 years ago
renew.go Simplify statuscoder error generators. 4 years ago
revoke.go Simplify statuscoder error generators. 4 years ago
revoke_test.go Simplify statuscoder error generators. 4 years ago
sign.go Simplify statuscoder error generators. 4 years ago
ssh.go Add support for user provisioner certificates on OIDC provisioners. 4 years ago
sshRekey.go Add context parameter to all SSH methods. 4 years ago
sshRenew.go Add context parameter to all SSH methods. 4 years ago
sshRevoke.go Add context parameter to all SSH methods. 4 years ago
ssh_test.go ssh/api: Use host tags instead of groups 4 years ago
utils.go acme: Retry challenge validation attempts 4 years ago
utils_test.go Fix tests. 4 years ago