awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 18:27:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Skip challenge verification

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-11-13 09:22:09 -08:00
parent 2f8700fdcd
commit 40532290f8
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/certificate-authority/acme/acme-certificate-authority-fns.ts
+4
View File
@@ -43,6 +43,7 @@ import {
} from "./acme-certificate-authority-types"; } from "./acme-certificate-authority-types";
import { cloudflareDeleteTxtRecord, cloudflareInsertTxtRecord } from "./dns-providers/cloudflare"; import { cloudflareDeleteTxtRecord, cloudflareInsertTxtRecord } from "./dns-providers/cloudflare";
import { route53DeleteTxtRecord, route53InsertTxtRecord } from "./dns-providers/route54"; import { route53DeleteTxtRecord, route53InsertTxtRecord } from "./dns-providers/route54";
import { getConfig } from "@app/lib/config/env";
type TAcmeCertificateAuthorityFnsDeps = { type TAcmeCertificateAuthorityFnsDeps = {
appConnectionDAL: Pick<TAppConnectionDALFactory, "findById">; appConnectionDAL: Pick<TAppConnectionDALFactory, "findById">;
@@ -240,6 +241,9 @@ export const orderCertificate = async (
csr: certificateCsr, csr: certificateCsr,
email: acmeCa.configuration.accountEmail, email: acmeCa.configuration.accountEmail,
challengePriority: ["dns-01"], challengePriority: ["dns-01"],
// For ACME development mode, we mock the DNS challenge API calls. So, no real DNS records are created.
// We need to disable the challenge verification to avoid errors.
skipChallengeVerification: getConfig().isAcmeDevelopmentMode,
termsOfServiceAgreed: true, termsOfServiceAgreed: true,
challengeCreateFn: async (authz, challenge, keyAuthorization) => { challengeCreateFn: async (authz, challenge, keyAuthorization) => {