Add support for badAttestationStatement error

Author: unixcharles

lib/acme/client/error.rb

@@ -97,6 +97,7 @@ class AutoRenewalCancellationInvalid < ServerError; end
   class AutoRenewalRevocationNotSupported < ServerError; end
   class UnknownDelegation < ServerError; end
   class OnionCAARequired < ServerError; end
+  class BadAttestationStatement < ServerError; end
 
   ACME_ERRORS = {
     'urn:ietf:params:acme:error:alreadyReplaced' => AlreadyReplaced,
@@ -129,6 +130,7 @@ class OnionCAARequired < ServerError; end
     'urn:ietf:params:acme:error:autoRenewalCancellationInvalid' => AutoRenewalCancellationInvalid,
     'urn:ietf:params:acme:error:autoRenewalRevocationNotSupported' => AutoRenewalRevocationNotSupported,
     'urn:ietf:params:acme:error:unknownDelegation' => UnknownDelegation,
-    'urn:ietf:params:acme:error:onionCAARequired' => OnionCAARequired
+    'urn:ietf:params:acme:error:onionCAARequired' => OnionCAARequired,
+    'urn:ietf:params:acme:error:badAttestationStatement' => BadAttestationStatement,
   }
 end

lib/acme/client/problem.rb

@@ -38,7 +38,8 @@ class Acme::Client::Problem
     'autoRenewalRevocationNotSupported' => 'A request to revoke an auto-renewal Order has been received',
     'unknownDelegation' => 'An unknown configuration is listed in the delegation attribute of the order request',
     'onionCAARequired' => 'The CA only supports checking the CAA for Hidden Services in-band, but the client has not provided an in-band CAA',
-    'alreadyReplaced' => 'The request specified a predecessor certificate that has already been marked as replaced'
+    'alreadyReplaced' => 'The request specified a predecessor certificate that has already been marked as replaced',
+    'badAttestationStatement' => 'The attestation statement is unacceptable (e.g. not signed by an attestation authority trusted by the CA)'
   }.freeze
 
   def self.from(value)