A Chinese certificate authority (“HiCA”, hi.cn/en/) is injecting arbitrary commands into the ACME challenge process, which acme.sh then executes on the client machine. Here’s my current analysis: https://github.com/acmesh-official/acme.sh/issues/4659
You must log in or register to comment.