search

kristapsdz / acme-client-portable

portable version of acme-client, a secure ACME client
https://kristaps.bsd.lv/acme-client
ISC License
100 stars 21 forks source link

dns-01 possible? #20

Closed m0yellow closed 7 years ago

m0yellow commented 7 years ago

I'm generating letsencrypt certificates for internal domains currently with a public dns challenge to avoid opening up internal hosts to the internet with a shell script. (my longtime goal is to replace all the self signed in house certs with LE ones.)

To make my setup future proof (a.k.a. secure), I'm thinking about your client. Are you in the progress of writing it? Or is there any clue how a contributor could hack together the dns challenge support?

kristapsdz commented 7 years ago

See the -t flag. You can interact directly with the challenge that way. (The "Challenges" section explains the protocol.)

m0yellow commented 7 years ago

Thanks for the link, had the man page open while writing the issue, but must have missed it. (D'oh). Your hint is highly appreciated