search

zenhack / simp_le

Simple Let's Encrypt client
GNU General Public License v3.0
224 stars 38 forks source link

Use .test. instead of .wtf. (fixes #71) #31

Closed zenhack closed 7 years ago

zenhack commented 7 years ago

Issue by kuba Sunday Apr 17, 2016 at 19:31 GMT _Originally opened as https://github.com/kuba/simp_le/pull/103_

_kuba included the following code: https://github.com/kuba/simp_le/pull/103/commits_

buchdag commented 7 years ago

@cpu > correct me if I'm wrong, but boulder won't work with reserved domains like .test, .example or .local right ?

cpu commented 7 years ago

@buchdag That's correct. Boulder's WillingToIssue function will reject anything that doesn't end in an ICANN registered TLD. .test, .example, and .local are not present in the list.

buchdag commented 7 years ago

thanks !

@zenhack > do you have any preference regarding this ? Close the issue and keep .wtf, replace it with .example.com/org, replace it with another TLD in ICANN list ?

zenhack commented 7 years ago

Looks ike @kuba tried that after the .test approach failed. At a glance, the travis build log suggests that *.example.{com,org,etc} are also rejected:

https://travis-ci.org/kuba/simp_le/jobs/123755661

@cpu, can you confirm?

I don't really think this is super important; something like example.org would be cleaner, but if there's not a straight-forward way to do that I'm inclined to just close and forget about it.

buchdag commented 7 years ago

Same here, I can live with .wtf if there no both clean and easy alternative.

cpu commented 7 years ago

Looks ike @kuba tried that after the .test approach failed. At a glance, the travis build log suggests that *.example.{com,org,etc} are also rejected: https://travis-ci.org/kuba/simp_le/jobs/123755661 @cpu, can you confirm?

Ahh, yes. the example hostname policy that Boulder includes in master blacklists those hostnames. You can either replace this file before starting Boulder or work around it with a different example name.

zenhack commented 7 years ago

Okay, that's what I suspected. I'm just going to close this and live with the current situation.