I would like LE to target a bit neglected part of auditory here. I have multiple hosts covered with SSL certs from regular authorities like Comodo, both on public and private networks. I’m comfortable with the idea of replacing them with LE issued ones and automating whole process. I’m not comfort…

you dont even have to open an HTTP site. the http-01 already accepts redirects, so if you keep the path and stuff while redirecting then it should work without a problem.

DNS-01 is enabled in production. https://twitter.com/letsencrypt/status/689919523164721152

Cool! How does it work? I can’t find documentation anywhere.

Thanks so much for this. I was able to get it working a few hours ago.

[image] gfunkdave: Cool! How does it work? I can't find documentation anywhere. The protocol specification is in ACME: draft-ietf-acme-acme-01 There are a few clients that support it already. letsencrypt.sh is one I know of.

Ah, OK. So the letsencrypt-auto clients doesn’t support it yet. Thanks.

Just be aware the server support is broken currently for a few DNS providers (cloudflare, google domains, and dnsimple I believe are all affected). Hopefully new build of server code will make it to production soon.

[image] nneul: Just be aware the server support is broken currently for a few DNS providers (cloudflare, google domains, and dnsimple I believe are all affected). Hopefully new build of server code will make it to production soon. Why or how is it broken? Doesn't DNS work the same way regardl…

If I understand correctly, there is an internal check done (at Boulder) that the DNS they check as the authoritative server is really the authoritative DNS server for that domain. Some ( such as those listed) return a null response - even though they are the authoritative server. Hence the reque…

I’ve successfully completed a DNS verification with Google Domains, FYI (back when it was on staging)

Shouldn't verification via DNS record be a priority?

Issuance Tech

My1 February 16, 2016, 11:31am 60

@maedox sadly yes, that's why I proposed this:

Topic		Replies	Views
[Suggestion] Let's Encrypt operated, TXT-only DNS Hosting for DNS challenges Feature Requests	18	8857	January 15, 2018
Other Authentication Methods Issuance Tech	36	3669	December 22, 2018
Help me understand acme-dns Issuance Tech	23	21386	May 1, 2018
DNS challenge is in staging Feature Requests	48	28148	February 10, 2016
DNS challenge and CN record - basics? Help	20	905	December 14, 2023

Shouldn't verification via DNS record be a priority?

Related topics