Remember to remove the resource when the challenge is completed

acme4j-example/src/main/java/org/shredzone/acme4j/ClientTest.java

@@ -283,6 +283,9 @@ public class ClientTest {
             throw new AcmeException("Failed to pass the challenge for domain "
                     + auth.getIdentifier().getDomain() + ", ... Giving up.");
         }
+
+        LOG.info("Challenge has been completed. Remember to remove the validation resource.");
+        completeChallenge("Challenge has been completed.\nYou can remove the resource again now.");
     }
 
     /**
@@ -382,6 +385,20 @@ public class ClientTest {
         }
     }
 
+    /**
+     * Presents the instructions for removing the challenge validation, and waits for
+     * dismissal.
+     *
+     * @param message
+     *            Instructions to be shown in the dialog
+     */
+    public void completeChallenge(String message) throws AcmeException {
+        JOptionPane.showMessageDialog(null,
+                        message,
+                        "Complete Challenge",
+                        JOptionPane.INFORMATION_MESSAGE);
+    }
+
     /**
      * Presents the user a link to the Terms of Service, and asks for confirmation. If the
      * user denies confirmation, an exception is thrown.

src/site/markdown/usage/order.md

@@ -66,6 +66,8 @@ The CA server may start the validation immediately after `trigger()` is invoked,
 
 When the authorization status is `VALID`, you have successfully authorized your domain.
 
+The response you have set up before is not needed any more. You can (and should) remove it now.
+
 ## Finalize the Order
 
 After successfully completing all authorizations, the order needs to be finalized by providing PKCS#10 CSR file. A single domain may be set as _Common Name_. Multiple domains must be provided as _Subject Alternative Name_. You must provide exactly the domains that you had passed to the `order()` method above, otherwise the finalization will fail. It depends on the CA if other CSR properties (_Organization_, _Organization Unit_ etc.) are accepted. Some may require these properties to be set, while others may ignore them when generating the certificate.