yourivw / LEClient

An easy-to-use PHP ACME v2 client library, designed to be used with LetsEncrypt.
MIT License
204 stars 98 forks source link

Not to verify certificate coming in http challenge #103

Closed anirudhmalhotra closed 4 years ago

anirudhmalhotra commented 4 years ago

Curl rejects http response if the url is redirected to a https resource with self-signed/expired certificate. Whereas lets encrypt validates such URLs. ref: https://letsencrypt.org/docs/challenge-types/ -- Search for "When redirected to an HTTPS URL, it does not validate certificates"