search

NLnetLabs / krillmanager

Layered infrastructure as code for running Krill as a highly available scalable service with integration points for monitoring and log analysis.
BSD 3-Clause "New" or "Revised" License
0 stars 1 forks source link

Incorrect warning about CNAME record #22

Closed ximon18 closed 4 years ago

ximon18 commented 4 years ago

When requesting a Let's Encrypt certificate during krillmanager init if a CNAME record is detected for the domain the following warning is shown:

WARNING: The domain has a CNAME record.

This warning is incorrect. Per the Let's Encrypt HTTP-01 Challenge documentation this is permitted and is in fact a feature:

Pros: It’s easy to automate without extra knowledge about a domain’s configuration. It allows hosting providers to issue certificates for domains CNAMEd to them. It works with off-the-shelf web servers.

ximon18 commented 4 years ago

Fixed in the v0.1.4 release.