github.com/letsencrypt/pebble/v2 v2.10.0

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:8017ddc68592c92e426eb9ad46fddca2c6c9140d074ef27da6dde8eca2038af8","contract":["acme.Identifier.Equals returns true for matching Type and Value and false when Type or Value differs","acme.RejectedIdentifierProblem builds a 400 Bad Request ProblemDetails with urn:ietf:params:acme:error:rejectedIdentifier and a matching subproblem identifier"],"goal":"verify pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0","kind":"HOW","packages":["pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0"],"schemaVersion":1,"symbols":["acme.Identifier.Equals","acme.RejectedIdentifierProblem"]},"contractCommand":["go","run","./test"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"golang","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0"],"schemaVersion":1,"subject":"pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0","verifierAdapter":"golang@1"}

module sample

go 1.24.0

require github.com/letsencrypt/pebble/v2 v2.10.0

github.com/letsencrypt/pebble/v2 v2.10.0 h1:Wq6gYXlsY6ubqI3hhxsTzdyotvfdjFBxuwYqCLCnj/U=
github.com/letsencrypt/pebble/v2 v2.10.0/go.mod h1:Sk8cmUIPcIdv2nINo+9PB4L+ZBhzY+F9A1a/h/xmWiQ=

{
  "schemaVersion": 1,
  "goal": "verify pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0",
  "kind": "HOW",
  "packages": [
    "pkg:golang/github.com/letsencrypt/pebble/v2@v2.10.0"
  ]
}

package main

import (
	"fmt"
	"net/http"
	"os"

	"github.com/letsencrypt/pebble/v2/acme"
)

func main() {
	id1 := acme.Identifier{Type: acme.IdentifierDNS, Value: "example.com"}
	id2 := acme.Identifier{Type: acme.IdentifierDNS, Value: "example.com"}
	id3 := acme.Identifier{Type: acme.IdentifierIP, Value: "127.0.0.1"}

	if !id1.Equals(id2) {
		fmt.Fprintln(os.Stderr, "expected equal identifiers to match")
		os.Exit(1)
	}
	if id1.Equals(id3) {
		fmt.Fprintln(os.Stderr, "expected different identifiers not to match")
		os.Exit(1)
	}

	prob := acme.RejectedIdentifierProblem(id1, "identifier rejected")
	if prob.HTTPStatus != http.StatusBadRequest {
		fmt.Fprintf(os.Stderr, "unexpected HTTPStatus: %d\n", prob.HTTPStatus)
		os.Exit(1)
	}
	if len(prob.Subproblems) != 1 || prob.Subproblems[0].Identifier == nil || !prob.Subproblems[0].Identifier.Equals(id1) {
		fmt.Fprintln(os.Stderr, "unexpected subproblem structure")
		os.Exit(1)
	}
	if prob.Error() != "urn:ietf:params:acme:error:rejectedIdentifier :: identifier rejected" {
		fmt.Fprintf(os.Stderr, "unexpected error string: %s\n", prob.Error())
		os.Exit(1)
	}
}