Hi,
For a customer we have recently adopted certbot to automatically request (via scripting) and renew certificates through the ACME of their certificate provider. They use Organisation Validation where domains are manually validated in the Certificate Manager once a year through DNS/CNAME. Consequently, no validation needs to be performed when a certificate is requested for a validated domain.
Knowing no validation is required, during testing, I tried to request a certificate (certonly
, no installer plugin) without specifying an authentication plugin in the command line. It then prompted me to select one anyway. When I tried to do the same with the -n
flag, the command failed alltogether saying I hadn't specified an authentication plugin and that it required one. When I specified an authenticator anyway (in this case --webroot
), everything worked fine and it didn't perform any validation whatsoever.
My feature request therefore is a very very minor one. While you can definitely obtain a certificate without having to perform any validation, it would be a very tiny "nice-to-have" to not have to specify an authentication plugin at all, to make automated processes a little more easier to read, and to reduce bloat in both the commands executed, and the resulting renewal configurations.