Skip to content

CAAIdentities should be array of string and is read from configuration - #63

Merged
jjrdk merged 1 commit into
jjrdk:masterfrom
peponeska:master
Aug 20, 2026
Merged

CAAIdentities should be array of string and is read from configuration#63
jjrdk merged 1 commit into
jjrdk:masterfrom
peponeska:master

Conversation

@peponeska

Copy link
Copy Markdown
Contributor

CAAIdentities should be array of string

CAAIdentities is read from configuration i.e. appsettings.json

CAAIdentities is read from configuration i.e. appsettings.json
@peponeska

Copy link
Copy Markdown
Contributor Author

According to RFC 8555 caaIdentities should be an array of string

caaIdentities (optional, array of string): The hostnames that the
ACME server recognizes as referring to itself for the purposes of
CAA record validation as defined in [RFC6844]. Each string MUST
represent the same sequence of ASCII code points that the server
will expect to see as the "Issuer Domain Name" in a CAA issue or
issuewild property tag. This allows clients to determine the
correct issuer domain name to use when configuring CAA records.

Also, it could be read from appsettings https://github.com/jjrdk/opencertserver/blob/master/src/opencertserver.acme.server/Endpoints/DirectoryEndpoints.cs#L38

@jjrdk
jjrdk merged commit 9eb1215 into jjrdk:master Aug 20, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants