{"action":"opened","issue":{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1028","labels_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1028/labels{/name}","comments_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1028/comments","events_url":"https://api.github.com/repos/letsencrypt/letsencrypt/issues/1028/events","html_url":"https://github.com/letsencrypt/letsencrypt/issues/1028","id":112251187,"number":1028,"title":"Revocation and the renewer","user":{"login":"bmw","id":6504915,"avatar_url":"https://avatars.githubusercontent.com/u/6504915?v=3","gravatar_id":"","url":"https://api.github.com/users/bmw","html_url":"https://github.com/bmw","followers_url":"https://api.github.com/users/bmw/followers","following_url":"https://api.github.com/users/bmw/following{/other_user}","gists_url":"https://api.github.com/users/bmw/gists{/gist_id}","starred_url":"https://api.github.com/users/bmw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bmw/subscriptions","organizations_url":"https://api.github.com/users/bmw/orgs","repos_url":"https://api.github.com/users/bmw/repos","events_url":"https://api.github.com/users/bmw/events{/privacy}","received_events_url":"https://api.github.com/users/bmw/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/labels/renewal","name":"renewal","color":"bfe5bf"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/letsencrypt/letsencrypt/milestones/2","html_url":"https://github.com/letsencrypt/letsencrypt/milestones/1.0%20for%20launch","labels_url":"https://api.github.com/repos/letsencrypt/letsencrypt/milestones/2/labels","id":966383,"number":2,"title":"1.0 for launch","description":"","creator":{"login":"pde","id":479213,"avatar_url":"https://avatars.githubusercontent.com/u/479213?v=3","gravatar_id":"","url":"https://api.github.com/users/pde","html_url":"https://github.com/pde","followers_url":"https://api.github.com/users/pde/followers","following_url":"https://api.github.com/users/pde/following{/other_user}","gists_url":"https://api.github.com/users/pde/gists{/gist_id}","starred_url":"https://api.github.com/users/pde/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pde/subscriptions","organizations_url":"https://api.github.com/users/pde/orgs","repos_url":"https://api.github.com/users/pde/repos","events_url":"https://api.github.com/users/pde/events{/privacy}","received_events_url":"https://api.github.com/users/pde/received_events","type":"User","site_admin":false},"open_issues":35,"closed_issues":21,"state":"open","created_at":"2015-02-05T00:42:45Z","updated_at":"2015-10-19T23:08:14Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2015-10-19T23:08:14Z","updated_at":"2015-10-19T23:08:14Z","closed_at":null,"body":"Related to #688, there is logic in `storage.py` to renew a certificate if it has been revoked according to OCSP. There are a number of problems with this:\r\n\r\n1. The `ocsp_revoked` function always returns `False` and just has a `XXX` comment that this function needs to be written.\r\n2. If automatic deployment is enabled and the currently deployed version is revoked, shouldn't the `renewer` also deploy a new, nonrevoked version if one exists? There is no logic for this."}}