TLS-SNI-01 validation is reaching end-of-life

[tdelmas]

@UbikMZ

What does it mean “stop working temporarily” ?

See March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support - #3 by jsha :

We will disable TLS-SNI validation in production on February 13, then re-enable it a week later.

@UbikMZ

Don’t you worry to put in trouble many of your users who could not manage to update the ACME client ?

They need to use another challenge method, not necessarily update the ACME client.

@UbikMZ

Personnaly I tried it with the support of your team and failed. I had to reverse back to TLS-SNI-01 which is not that straightforward neither.

According to March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support - #2 by jsha :

Also, we’re changing the final end-of-life date for TLS-SNI in production to March 13, 2019. This will give more people time to update
So you need to find another way (such as using the HTTP-01 challenge) or after that date you will not be able to renew your certificated anymore.

@UbikMZ

At least you should, please, let us some more time.

As explained, they pushed the deadline to to March 13, 2019 (Was February 13, 2019).

It was announced March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support since October, 2018 and a reminder was sent by email more than two weeks ago. And one year ago they strongly encourage people to move to HTTP or DNS validation rather than attempt to get on the TLS-SNI-01 whitelist.