I would like to use Let’s Encrypt for my Nextcloud server. Unfortunately, to the best of my knowledge, the TLS-SNI-01 challenge is still on hold while the security issues are resolved. What’s the status on this? I’m currently using a self-signed certificate, which is kind of a pain when I’m sharing …

Hi @fpernice518 [image] fpernice518: Unfortunately, to the best of my knowledge, the TLS-SNI-01 challenge is still on hold while the security issues are resolved. What’s the status on this? the tls-sni-01 - challenge is deprecated. The support ends 2019-02-13. [image] March…

Let’s Encrypt supports the newer TLS-ALPN-01 challenge type on port 443, but not many clients support it yet.

If you need one, see this recent discussion: Which client support tls-alpn challenge?

Might I suggest that LetsEncrypt update their server error message to mention recent changes/deprecations? Our challenges started failing recently due to Certbot now preferring http-01 over tls-sni-01. That switch was invisible to us, leading us to think that something had changed on our end. Just …

What's the status on TLS-SNI-01 challenge

Server

JuergenAuer November 16, 2018, 7:00pm 2

Hi @fpernice518

the tls-sni-01 - challenge is deprecated. The support ends 2019-02-13.

PS: You can use the dns-01 - validation.

Topic		Replies	Views
TLS-SNI-01 validation is reaching end-of-life Help	25	5278	February 6, 2019
March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support API Announcements	6	89885	March 15, 2019
Turning off old/insecure challenge types Client dev	11	8762	November 20, 2015
Letsencrypt-auto not working any more Help	7	7123	January 4, 2019
TLS-SNI challenges disabled for most new issuance API Announcements	0	18040	January 13, 2018

What's the status on TLS-SNI-01 challenge

Related topics