Skip to content

Conversation

@beautifulentropy
Copy link
Member

@beautifulentropy beautifulentropy commented Mar 11, 2025

  • Plumb the "replaces" value from the WFE through to the SA via the RA
  • Store validated "replaces" value for new orders in the orders table
  • Reflect the stored "replaces" value to subscribers in the order object
  • Reorder CertificateProfileName before Replaces/ReplacesSerial in RA and SA protos for consistency

Fixes #8034


CPS Compliance Review: this change in no way impacts our CP/CPS compliance, it resolves an unintentional divergence from draft-ietf-acme-ari.

Deployment is being tracked in: IN-11106

@beautifulentropy beautifulentropy marked this pull request as ready for review March 11, 2025 14:57
@beautifulentropy beautifulentropy requested a review from a team as a code owner March 11, 2025 14:57
@github-actions
Copy link
Contributor

@beautifulentropy, this PR appears to contain configuration and/or SQL schema changes. Please ensure that a corresponding deployment ticket has been filed with the new values.

@github-actions
Copy link
Contributor

@beautifulentropy, this PR adds one or more new feature flags: StoreARIReplacesInOrders. As such, this PR must be accompanied by a review of the Let's Encrypt CP/CPS to ensure that our behavior both before and after this flag is flipped is compliant with that document.

Please conduct such a review, then add your findings to the PR description in a paragraph beginning with "CPS Compliance Review:".

@letsencrypt letsencrypt deleted a comment from github-actions bot Mar 11, 2025
aarongable
aarongable previously approved these changes Mar 11, 2025
Copy link
Contributor

@aarongable aarongable left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, this is really elegantly done. Just a few tiny comments.

@aarongable aarongable requested review from jprenken and jsha March 11, 2025 23:57
jprenken
jprenken previously approved these changes Mar 12, 2025
@beautifulentropy beautifulentropy merged commit 428fcb3 into main Mar 12, 2025
16 checks passed
@beautifulentropy beautifulentropy deleted the order-indicates-replaces branch March 12, 2025 19:09
commonism added a commit to commonism/acmetk that referenced this pull request Oct 19, 2025
commonism added a commit to noahkw/acmetk that referenced this pull request Oct 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Orders created from a replacement order req missing echoed "replaces" value?

4 participants