Hi I’m curious why a webroot-path (path to your code) is required? I don’t recall a time where I needed to point to a path to my code when purchasing and issuing my own cert. I was just curious why this would be needed.
Here is what the help command says but is not entirely helpful on how its used for auth.
–webroot Place files in a server’s webroot folder for authentication
Let’s Encrypt gives a token to your ACME client, and your ACME client puts a file on your web server at http://<YOUR_DOMAIN>/.well-known/acme-challenge/<TOKEN> . That file contains the token, plus a thumbprint of your account key. Once your ACME client tells Let’s Encrypt that the file is ready, Let’s Encrypt tries retrieving it (potentially multiple times from multiple vantage points). If our validation checks get the right responses from your web server, the validation is considered successful and you can go on to issue your certificate. If the validation checks fail, you’ll have to try again with a new certificate.
How should that work if your ACME client doesn’t know where to save the challenge file?