Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] 是否考虑支持将.well-known目录推送到其他存储之后再进行认证? #4605

Open
abcfy2 opened this issue Apr 18, 2023 · 3 comments

Comments

@abcfy2
Copy link

abcfy2 commented Apr 18, 2023

某些情况下我会使用 Aliyun OSS + CDN 或 AWS S3 + Cloudfront方式部署,但是域名并不由我控制,或者域名提供商并不支持API接口,只能通过http方式认证。

对于这种场景,是否考虑支持将.well-known目录推送至 OSS / S3之后再进行http认证签发证书?

也许加个 --webroot-post-hook 是一个选择?

@Neilpang
Copy link
Member

可以考虑, 不过最近没时间

@abcfy2
Copy link
Author

abcfy2 commented Apr 20, 2023

多谢,因为看到certbot有类似的插件 https://github.com/dlapiduz/certbot-s3front 可以支持这种场景 ,所以可以让acme.sh也支持类似的功能。比如添加一个参数--webroot-hook,目录结构类似于:

webroot-hook
`-- sftp.sh
`-- rsync.sh
`-- s3.sh
`-- oss.sh
...

实现将本地的目录推送至远程服务器完成http认证签发证书的目的

@anjia0532
Copy link

可以试试 pre-hook + 阿里云 ossfs 其他对象存储可以试试 juicefs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants