Check validity of authz for wildcard domains, too

Authorizations for wildcard domains can also be already valid (esp. when
using external account bindings).
This commit is contained in:
Alexander Sulfrian 2023-02-15 18:46:09 +01:00
parent f7f1168aad
commit a099f2d3b4

View File

@ -4674,14 +4674,12 @@ $_authorizations_map"
_debug entry "$entry" _debug entry "$entry"
keyauthorization="" keyauthorization=""
if [ -z "$entry" ]; then if [ -z "$entry" ]; then
if ! _startswith "$d" '*.'; then _debug "Let's check whether the validation is already valid."
_debug "Not a wildcard domain, lets check whether the validation is already valid."
if echo "$response" | grep '"status":"valid"' >/dev/null 2>&1; then if echo "$response" | grep '"status":"valid"' >/dev/null 2>&1; then
_debug "$d is already valid." _debug "$d is already valid."
keyauthorization="$STATE_VERIFIED" keyauthorization="$STATE_VERIFIED"
_debug keyauthorization "$keyauthorization" _debug keyauthorization "$keyauthorization"
fi fi
fi
if [ -z "$keyauthorization" ]; then if [ -z "$keyauthorization" ]; then
_err "Error, can not get domain token entry $d for $vtype" _err "Error, can not get domain token entry $d for $vtype"
_supported_vtypes="$(echo "$response" | _egrep_o "\"challenges\":\[[^]]*]" | tr '{' "\n" | grep type | cut -d '"' -f 4 | tr "\n" ' ')" _supported_vtypes="$(echo "$response" | _egrep_o "\"challenges\":\[[^]]*]" | tr '{' "\n" | grep type | cut -d '"' -f 4 | tr "\n" ' ')"