taylanbakircioglu e86e86a53c fix(acme): scope ACME nonce per CA - fixes ZeroSSL registration (v1.8.2) ...

ZeroSSL/Google account registration failed with
`malformed: The Replay Nonce could not be base64url-decoded`: the ACME client
(a process-wide singleton) kept a single anti-replay nonce shared across
certificate authorities, so a nonce issued by one CA could be sent to another,
and the auto-retry only covered `badNonce`.

- Scope the nonce per CA (self._nonce_by_dir keyed by directory_url): a nonce
  from one CA is never sent to another; account registration always uses a fresh
  nonce from the target CA.
- Broaden the 400 retry to also recover from the nonce-malformed rejection.
- Fix _b64url_decode padding (used for the EAB HMAC key).

Backend-only; HTTP-01 and Let's Encrypt are unaffected.

Addresses #35.

2026-06-25 01:11:15 +03:00

..

public

feat: rebrand to HAProxy OpenManager, remove demo accounts from login

2026-03-19 13:12:24 +03:00

src

fix(acme): Cloudflare token, ZeroSSL EAB, Apply Management (v1.8.1)

2026-06-24 20:37:05 +03:00

.dockerignore

feat: v1.6.0 — Multi-Factor Authentication (Issue #18)

2026-05-19 04:35:16 +03:00

Dockerfile

fix: upgrade react-scripts to 5.0.1 for frontend Docker build compatibility

2026-03-16 13:25:03 +03:00

Dockerfile.test

Initial commit

2025-10-27 12:14:03 +03:00

package-lock.json

fix(deps): bump shell-quote to 1.8.4 (GHSA-w7jw-789q-3m8p)

2026-06-15 14:24:14 +03:00

package.json

fix(acme): scope ACME nonce per CA - fixes ZeroSSL registration (v1.8.2)

2026-06-25 01:11:15 +03:00

package.json.test

Initial commit

2025-10-27 12:14:03 +03:00