From 90b94a834f03b4a901408977fbafb586b636bd35 Mon Sep 17 00:00:00 2001 From: Aaron Gable Date: Mon, 2 Mar 2026 10:37:27 -0800 Subject: [PATCH] Exempt ARI renewals from on-demand blocklisting --- wfe2/wfe.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wfe2/wfe.go b/wfe2/wfe.go index 91796c8a40a..7c12ad7e608 100644 --- a/wfe2/wfe.go +++ b/wfe2/wfe.go @@ -2400,7 +2400,7 @@ func (wfe *WebFrontEndImpl) NewOrder( isRenewal = len(timestamps.Timestamps) > 0 } - if !isRenewal { + if !isRenewal && !isARIRenewal { err = looksLikeRecursiveOnDemandRequest(idents, wfe.blockedOnDemandLabels) if err != nil { wfe.sendError(response, logEvent, web.ProblemDetailsForError(err, "Disallowed identifier requested"), nil)