When will Let's Encrypt's IP certificates be officially launched?

(post deleted by author)

I'll be glad to be add in this list to test it. I want an IP certificate for a DoH server, basically, it's a Spring Boot application.
https://acme-v02.api.letsencrypt.org/acme/acct/2856572346
Thank you.

We aren't taking any more accounts for early access right now. We will be launching for all shortly.

10 Likes

Does the IP certificate support authentication using a custom port?And i cannot wait to use it.Will be launched within 2 days or later?

Support for IP address identifiers is implemented as per RFC8738, which means that validation is performed using the existing http-01 and tls-alpn-01 challenges. RFC8555 mandates that http-01 challenges are validated on port 80 (redirects may be followed) and tls-alpn-01 is validated on port 443 as per RFC8737. So no there is no "custom port", validation is as it was before.

7 Likes

Really looking forward to being able to run + automate these certs on our Amazon Linux servers!

1 Like

Is it possible to launch pulicly in 2025? So exciting.

2 Likes

I run a DNS-over-HTTPS service for my team, which prefer IP cert.

https://acme-v02.api.letsencrypt.org/acme/acct/2873600536

Seems like I missed the boat on early-access. Is there any way get access now, maybe through the staging server?

@ambyjkl have you tried requesting a cert from staging? It should work, it just won't be a publicly trusted cert.

3 Likes

Oh i see, so staging environment is not trusted, that's a problem for me, since I need it work on prod.

If you wait just a tiny bit, we plan to launch shortlived certs to general availability very soon.

11 Likes

See Upcoming Changes to Let’s Encrypt Certificates

"This week"

8 Likes

Hi there,

I would like to request early access for IP certificates.

Account URL: https://acme-v02.api.letsencrypt.org/acme/acct/2882207456

Use Case: I am running a few internal services and testing environments on bare IPs where assigning a domain name is not practical. I need to secure the communication to these endpoints directly via HTTPS.

Thanks!

Please see the post immediately before yours in this thread :slight_smile:

It explains more about the general availability of these features.

Earlier posts in this thread explained that early access was closed given the imminent g/a

5 Likes

I'm getting shortlived certificate on my other machine :partying_face:

4 Likes

So am I.

Not yet with the "Y" generation described chain (described here).

2 Likes

Yep, I just got a shiny new shortlived certificate. Congrats LE team on the release!

1 Like

We're still sorting out a few details on the "Gen Y" switch, so you should regard this change as still "in progress"

10 Likes

Thank you. I have deployed IP certificate on my server via acme.sh

3 Likes