Update draft-ari references to RFC 9773

Author: mholt

README.md

@@ -33,7 +33,7 @@ In other words, the `acmez` package is **porcelain** while the `acme` package is
 	- Device attestation challenges ([draft-acme-device-attest-02](https://datatracker.ietf.org/doc/draft-acme-device-attest/))
 	- [RFC 8737](https://www.rfc-editor.org/rfc/rfc8737.html) (tls-alpn-01 challenge)
 	- [RFC 8823](https://www.rfc-editor.org/rfc/rfc8823.html) (email-reply-00 challenge; S/MIME)
-- ACME Renewal Information (ARI) support ([draft-ietf-acme-ari-03](https://datatracker.ietf.org/doc/draft-ietf-acme-ari/))
+- ACME Renewal Information (ARI) support ([RFC 9773](https://datatracker.ietf.org/doc/html/rfc9773)
 - ACME profiles ([draft-aaron-acme-profiles](https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/))
 
 

acme/ari.go

@@ -34,7 +34,7 @@ var ErrUnsupported = fmt.Errorf("unsupported by ACME server")
 // on when they should renew certificates."
 //
 // ACME Renewal Information (ARI):
-// https://www.ietf.org/archive/id/draft-ietf-acme-ari-03.html §4.2
+// https://datatracker.ietf.org/doc/html/rfc9773 §4.2
 //
 // This is a DRAFT specification and the API is subject to change.
 type RenewalInfo struct {
@@ -168,7 +168,7 @@ func (c *Client) GetRenewalInfo(ctx context.Context, leafCert *x509.Certificate)
 		// timestamp), it SHOULD make its own determination of when to
 		// renew the certificate, and MAY retry the renewalInfo request
 		// with appropriate exponential backoff behavior."
-		// draft-ietf-acme-ari-04 §4.2
+		// RFC 9773 §4.2
 		if ari.SuggestedWindow.Start.IsZero() ||
 			ari.SuggestedWindow.End.IsZero() ||
 			ari.SuggestedWindow.Start.Equal(ari.SuggestedWindow.End) ||
@@ -191,7 +191,7 @@ func (c *Client) GetRenewalInfo(ctx context.Context, leafCert *x509.Certificate)
 	}
 
 	// "The server SHOULD include a Retry-After header indicating the polling
-	// interval that the ACME server recommends." draft-ietf-acme-ari-03 §4.2
+	// interval that the ACME server recommends." RFC 9773 §4.2
 	raTime, err := retryAfterTime(resp)
 	if err != nil && c.Logger != nil {
 		c.Logger.LogAttrs(ctx, slog.LevelError, "invalid Retry-After value",
@@ -244,7 +244,6 @@ func (c *Client) ariEndpoint(ariCertID string) string {
 
 // ARIUniqueIdentifier returns the unique identifier for the certificate
 // as used by ACME Renewal Information.
-// EXPERIMENTAL: ARI is a draft RFC spec: draft-ietf-acme-ari-03
 func ARIUniqueIdentifier(leafCert *x509.Certificate) (string, error) {
 	if leafCert.SerialNumber == nil {
 		return "", fmt.Errorf("no serial number")

acme/certificate.go

@@ -110,7 +110,7 @@ func (c *Client) GetCertificateChain(ctx context.Context, account Account, certU
 			Account:  account.Location,
 		}
 
-		// attach renewal information, if applicable (draft-ietf-acme-ari-03)
+		// attach renewal information, if applicable (RFC 9773)
 		if c.dir.RenewalInfo != "" {
 			certDERBlock, _ := pem.Decode(chainPEM)
 			if certDERBlock != nil && certDERBlock.Type == "CERTIFICATE" {

acme/client.go

@@ -177,7 +177,7 @@ type Directory struct {
 	NewAuthz    string         `json:"newAuthz,omitempty"`
 	RevokeCert  string         `json:"revokeCert"`
 	KeyChange   string         `json:"keyChange"`
-	RenewalInfo string         `json:"renewalInfo,omitempty"` // draft-ietf-acme-ari
+	RenewalInfo string         `json:"renewalInfo,omitempty"` // RFC 9773
 	Meta        *DirectoryMeta `json:"meta,omitempty"`
 }
 

acme/order.go

@@ -59,7 +59,7 @@ type Order struct {
 	// this field in New Order requests if there is a clear predecessor
 	// certificate, as is the case for most certificate renewals.
 	//
-	// EXPERIMENTAL:  Draft ACME extension ARI: draft-ietf-acme-ari-03
+	// ACME extension ARI: RFC 9773 §5
 	Replaces string `json:"replaces,omitempty"`
 
 	// notBefore (optional, string):  The requested value of the notBefore