louketo / louketo-proxy

A OpenID / Proxy service
Apache License 2.0
950 stars 345 forks source link

keycloak-gatekeeper: Let's Encrypt support is broken #570

Open abstractj opened 4 years ago

abstractj commented 4 years ago

What:

Per [this announcement|https://community.letsencrypt.org/t/tls-sni-challenges-disabled-for-most-new-issuance/50316], Let's Encrypt disabled TLS-SNI challenge permanently due to a security issue. So currently Let's Encrypt support in gatekeeper is broken.

I sent out a PR several months ago to fix this, which enables HTTP-01 challenge as an alternative. You can use that as a reference.

Reference:

ThoreKr commented 4 years ago

523 should be the same issue.