Actions
Feature #16623
closed
Account Key fields for External Account Binding
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Description
Some CAs now use External Account Binding instead of typical Account Key registration, including:
- ZeroSSL
- SSL.com
- Actalis
- StepCA (optional, depends on the server config)
This requires two fields:
"EAB Key ID" and "EAB HMAC Key"
These fields are used when registering the account initially via acme.sh, e.g.
acme.sh --register-account \
--server <name> \
--eab-kid <id> \
--eab-hmac-key <hmac>
They should only be passed if the user filled them in. Let's Encrypt does not require them, other CAs do.
Updated by
Actions