JonahGroendal / acme-easy

An ACME client for the browser that authenticates via DNS-01 challenge and supports LetsEncrypt by default.
https://www.npmjs.com/package/acme-easy
MIT License
2 stars 1 forks source link

wildcard cert #15

Open jimmywarting opened 1 year ago

jimmywarting commented 1 year ago

is it possible to create a wildcard domain? i tried it out but it said:

{
  "type": "urn:ietf:params:acme:error:orderNotReady",
  "detail": "Order's status (\"valid\") is not acceptable for finalization",
  "status": 403
}

reading up on advantages and disadvantages here: https://letsencrypt.org/docs/challenge-types/ it says http & tls don't support wildcard but dns dose.

JonahGroendal commented 1 year ago

That's an odd error message. I haven't personally tried registering a wildcard domain but a quick Google search indicates it's supported by Let's Encrypt via DNS-01, so it should be possible. Maybe be an issue with the code

jimmywarting commented 1 year ago

I manage to get it to work... but only for the subdomains... not for the root domain... 😞 need some kind of "naked domain" or san?

don't know how to solve it but i think https://serverfault.com/a/938377 is a good lead

maybe something that can be solved with node-forge?