Support Multi-Server TLS in Caddy

cretz / software-ideas

88 stars 0 forks source link

Open cretz opened 8 years ago

cretz commented 8 years ago

Using https://caddyserver.com/ and the default ACME protocol, ACME chooses any A record to lookup challenge info
This can be done multiple ways:
- Share the challenge state across Caddy servers
- Share the challenge state in a shared backend like Consul or something
- Proxy challenge state to a single leader (needs to be able to change leaderness on the fly though)

cretz commented 7 years ago

As an update, I implemented pluggable cert storage a while back in https://github.com/mholt/caddy/pull/913. Then I toyed with a consul impl at https://github.com/cretz/caddy-tlsconsul but nothing further.

cretz commented 7 years ago

Also note, the DNS challenge provides this and is what I use in production in other contexts