# What's the status on TLS-SNI-01 challenge **URL:** \ **Category:** Server\ **Created:** [November 16, 2018, 6:55pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702 "2018-11-16T18:55:05Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![fpernice518](https://avatars.discourse-cdn.com/v4/letter/f/b5ac83/32.png) [@fpernice518](https://community.letsencrypt.org/u/fpernice518)\ **Post date:** [November 16, 2018, 6:55pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702/1 "2018-11-16T18:55:05Z")
I would like to use Let’s Encrypt for my Nextcloud server. Unfortunately, to the best of my knowledge, the TLS-SNI-01 challenge is still on hold while the security issues are resolved. What’s the status on this? I’m currently using a self-signed certificate, which is kind of a pain when I’m sharing files with non-technical people (who freak out when their browser yells at them). My ISP blocks port 80, so I’m kind of screwed when it comes to using Let’s Encrypt. ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [November 16, 2018, 7:00pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702/2 "2018-11-16T19:00:51Z")
Hi @fpernice518 > [@fpernice518](#): > > Unfortunately, to the best of my knowledge, the TLS-SNI-01 challenge is still on hold while the security issues are resolved. What’s the status on this? the tls-sni-01 - challenge is deprecated. The support ends 2019-02-13. > [@March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support](https://community.letsencrypt.org/t/february-13-2019-end-of-life-for-all-tls-sni-01-validation-support/74209): > > L… PS: You can use the dns-01 - validation. ---
**Author:** ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)\ **Post date:** [November 16, 2018, 7:10pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702/3 "2018-11-16T19:10:26Z")
Let’s Encrypt supports the newer TLS-ALPN-01 challenge type on port 443, but not many clients support it yet. ---
**Author:** ![jmorahan](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jmorahan/32/1873_2.png) [@jmorahan](https://community.letsencrypt.org/u/jmorahan)\ **Post date:** [November 16, 2018, 8:36pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702/4 "2018-11-16T20:36:24Z")
If you need one, see this recent discussion: [Which client support tls-alpn challenge?](https://community.letsencrypt.org/t/which-client-support-tls-alpn-challenge/75859) ---
**Author:** ![MDiamond](https://avatars.discourse-cdn.com/v4/letter/m/67e7ee/32.png) [@MDiamond](https://community.letsencrypt.org/u/MDiamond)\ **Post date:** [December 11, 2018, 1:48pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702/5 "2018-12-11T13:48:39Z")
Might I suggest that LetsEncrypt update their server error message to mention recent changes/deprecations? Our challenges started failing recently due to Certbot now preferring http-01 over tls-sni-01. That switch was invisible to us, leading us to think that something had changed on our end. Just a thought. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [January 10, 2019, 1:48pm UTC](https://community.letsencrypt.org/t/whats-the-status-on-tls-sni-01-challenge/77702/6 "2019-01-10T13:48:51Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.