I would like LE to target a bit neglected part of auditory here. I have multiple hosts covered with SSL certs from regular authorities like Comodo, both on public and private networks. I’m comfortable with the idea of replacing them with LE issued ones and automating whole process. I’m not comfort…

Is there some kind of roadmap where progress on this highly anticipated feature can be tracked? Since it looks as if only Boulder needs some features added before we can start using it :slightly_smiling:

I’m looking forward to this too. All of my HTTP websites are just redirects to my HTTPS sites and having to open up an actual HTTP website just to do the cert upgrade every 90 days in a pain.

you dont even have to open an HTTP site. the http-01 already accepts redirects, so if you keep the path and stuff while redirecting then it should work without a problem.

DNS-01 is enabled in production. https://twitter.com/letsencrypt/status/689919523164721152

Cool! How does it work? I can’t find documentation anywhere.

[image] gfunkdave: Cool! How does it work? I can't find documentation anywhere. The protocol specification is in ACME: draft-ietf-acme-acme-01 There are a few clients that support it already. letsencrypt.sh is one I know of.

Ah, OK. So the letsencrypt-auto clients doesn’t support it yet. Thanks.

Just be aware the server support is broken currently for a few DNS providers (cloudflare, google domains, and dnsimple I believe are all affected). Hopefully new build of server code will make it to production soon.

[image] nneul: Just be aware the server support is broken currently for a few DNS providers (cloudflare, google domains, and dnsimple I believe are all affected). Hopefully new build of server code will make it to production soon. Why or how is it broken? Doesn't DNS work the same way regardl…

Shouldn't verification via DNS record be a priority?

Issuance Tech

thardie January 21, 2016, 5:44am 47

Thanks so much for this. I was able to get it working a few hours ago.

Topic		Replies	Views
[Suggestion] Let's Encrypt operated, TXT-only DNS Hosting for DNS challenges Feature Requests	18	8916	January 15, 2018
Other Authentication Methods Issuance Tech	36	3714	December 22, 2018
Help me understand acme-dns Issuance Tech	23	21566	May 1, 2018
DNS challenge is in staging Feature Requests	48	28231	February 10, 2016
DNS challenge and CN record - basics? Help	20	959	December 14, 2023

Shouldn't verification via DNS record be a priority?

Related topics