Skip to content

Commit

Permalink
Reduce diagram size
Browse files Browse the repository at this point in the history
  • Loading branch information
vanbroup committed Jul 6, 2023
1 parent 483658a commit 635386d
Showing 1 changed file with 28 additions and 28 deletions.
56 changes: 28 additions & 28 deletions draft-vanbrouwershaven-acme-auto-discovery.md
Original file line number Diff line number Diff line change
Expand Up @@ -165,34 +165,34 @@ It is important for implementers and operators to ensure the availability and ac
The process looks as follows:

~~~ aasvg
+----------------------+ +----------------------------+
| | | |
| ACME Client | 1. DNS Lookup (CAA) | DNS Resolver |
| +----------------------------->+ |
| | +------------+---------------+
| |<------------+ |
+-------------------+--+ | v
^ | | DNS Response +----------------------------+
| | +----------------+ example.com CAA |
| | | Record: |
| | | |
| | 2. Select issuer (CA) | example.com |
| | based on priority | CAA 0 issue "ca.example |
| | +----------------------------+
| |
| | +----------------------------+
| | 3. Connect issuer (CA) | |
| +-------------------------------->+ https://example.ca/ +--+
| | .well-known/acme | |
| | | |
| +----------------------------+ |
| | Redirect
| | or alias
| +----------------------------+ |
| ACME Directory Object | | |
+-----------------------------------+ https://acme.ca.example/v2 |<-+
| |
+----------------------------+
+-------------+ +--------------------------+
| | | |
| | 1. DNS Lookup (CAA) | DNS Resolver |
| ACME Client +------------------------->+ |
| | +------------+-------------+
| |<---------+ |
+----------+--+ | v
^ | | +--------------------------+
| | | DNS Response | example.com CAA |
| | +---------------+ Record: |
| | | |
| | 2. Select issuer (CA) | example.com |
| | based on priority | CAA 0 issue "ca.example |
| | +--------------------------+
| |
| | +--------------------------+
| | 3. Connect issuer (CA) | |
| +---------------------------->+ https://example.ca/ |
| | .well-known/acme |
| | |
| +------------+-------------+
| | Redirect
| v or alias
| +--------------------------+
| ACME Directory Object | |
+-------------------------------+ https://acme.ca.example/ |
| |
+--------------------------+
~~~

1. The ACME client initiates a DNS lookup to retrieve the CAA record(s) according to [RFC8659].
Expand Down

0 comments on commit 635386d

Please sign in to comment.