github
/
acme4j
mirror of https://github.com/shred/acme4j
1
0
Fork 0
Code Issues Releases Wiki Activity

Postpone MAC based recovery 

Currently, Let's Encrypt does not support either of the account recovery mechanisms anyways.
pull/17/merge
Richard Körber 2015-12-22 00:13:36 +01:00
parent 2898642ebf
commit 381f4a6e46
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -36,7 +36,6 @@ See the [online documentation](http://www.shredzone.org/maven/acme4j/) for how t
The following features are planned to be completed for the first beta release, but are still missing: The following features are planned to be completed for the first beta release, but are still missing:
* Support of MAC-based account recovery.
* `proofOfPossession-01` and `tls-sni-01` challenge support. * `proofOfPossession-01` and `tls-sni-01` challenge support.
## Contribute ## Contribute

10
src/site/markdown/usage/recovery.md
View File

@ -8,6 +8,8 @@ Individual CAs may offer further ways of recovery, which are not part of this do
## Contact-Based Recovery ## Contact-Based Recovery
**NOTE**: Contact-Based Recovery is [currently not supported by _Let's Encrypt_](https://github.com/letsencrypt/boulder/issues/432).
On this recovery method, the CA contacts the account owner via one of the contact addresses given on account creation. The owner is asked to take some action (e.g. clicking on a link in an email). If it was successful, the account data is transferred to the new account. On this recovery method, the CA contacts the account owner via one of the contact addresses given on account creation. The owner is asked to take some action (e.g. clicking on a link in an email). If it was successful, the account data is transferred to the new account.
To initiate contact-based recovery, you first need to create a new key pair and an `Account` object. Then create a `Registration` object by passing the location URI of your _old_ account to the constructor. Finally, start the recovery process by invoking `recoverRegistration()`: To initiate contact-based recovery, you first need to create a new key pair and an `Account` object. Then create a `Registration` object by passing the location URI of your _old_ account to the constructor. Finally, start the recovery process by invoking `recoverRegistration()`:
@ -23,3 +25,11 @@ URI newAccountUri = reg.getLocation();
``` ```
`newAccountUri` is the location URI of your _new_ account. `newAccountUri` is the location URI of your _new_ account.
## MAC-Based Recovery
**NOTE**: MAC-Based Recovery is [currently not supported by _Let's Encrypt_](https://github.com/letsencrypt/boulder/issues/433).
On this recovery method, the client proves to the server that it holds a secret value that was established when the initial account was registered.
_acme4j_ does currently not support MAC-based recovery.