google / sxg-rs

A set of tools for generating signed exchanges at serve time.
Apache License 2.0
83 stars 20 forks source link

Integrate ACME challenge with Fastly edge dictionary #369

Closed antiphoton closed 1 year ago

antiphoton commented 1 year ago

Overall procedure of ACME with Fastly

  1. Deploy Fastly worker with no ACME data.
  2. Run apply_acme_cert locally, which
    1. connects to ACME server and creates challenge URL and challenge answer;
    2. puts ACME challenge data to Fastly online dictionary;
    3. waits Fastly worker to load ACME challenge data from online dictionary;
    4. notifies ACME server that Fastly worker is ready for challenge;
    5. gets certificate from ACME server, and puts it to Fastly online dictionary.