search

j81blog / GenLeCertForNS

This script helps you to create a Let's Encrypt certificate for your NetScaler
GNU General Public License v3.0
39 stars 16 forks source link

Validation via HTTPS (TLS-ALPN-01) #19

Open kuechn opened 5 months ago

kuechn commented 5 months ago

When neither DNS nor HTTP is possible (in very hardened setups), the TLS in-place validation on port 443 comes in mind;

https://letsencrypt.org/docs/challenge-types/ (https://datatracker.ietf.org/doc/html/rfc8737)

Posh-ACME supports it. On the ADC the "ALPN responder" has to be aware of this special TLS request. Did you ever had a look at this type?

j81blog commented 2 months ago

no, did not had any intentions with it. But if its requested, I can look at it some day. But that won't be in the foreseeable future.