A post about the new ACME ARI support in Apache httpd.
#apache #acme
https://eissing.org/icing/posts/apache-acme-ari/
icing's blog · Apache ACME ARIWith mod_md v2.6.0 the Apache ACME in httpd supports the new “ARI” extension. This is described in rfc9773 titled “ACME Renewal Information (ARI) Extension”. What does that mean?
An ACME CA, like Let’s Encrypt, can publish an API endpoint where a client can ask it about a certificate renewal. This can be seen in the “directory” of the server. Like this:
> curl https://acme-v02.api.letsencrypt.org/directory { "-S7Ve8oLIfo": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "profiles": { "classic": "https://letsencrypt.org/docs/profiles#classic", "shortlived": "https://letsencrypt.org/docs/profiles#shortlived (not yet generally available)", "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver" }, "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.5-February-24-2025.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "renewalInfo": "https://acme-v02.api.letsencrypt.org/acme/renewal-info", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } The ARI endpoint is seen here at renewalInfo. Asking that URL, you’ll get:
Beide Modelle dürfen angepasst, kommerziell genutzt und über Plattformen wie Hugging Face oder AWS bezogen werden.
Nach Kritik und Konkurrenzdruck setzt 
