Enable HTTPS for ACME challenge

aeris · Dec 12, 2015 · 5eb7037 · 5eb7037
1 parent 81e357f
commit 5eb7037
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/acme_tiny.py b/acme_tiny.py
@@ -112,7 +112,7 @@ def _send_signed_request(url, payload):
             wellknown_file.write(keyauthorization)
 
         # check that the file is in place
-        wellknown_url = "http://{0}/.well-known/acme-challenge/{1}".format(domain, token)
+        wellknown_url = "https://{0}/.well-known/acme-challenge/{1}".format(domain, token)
         try:
             resp = urlopen(wellknown_url)
             resp_data = resp.read().decode('utf8').strip()
@@ -125,6 +125,7 @@ def _send_signed_request(url, payload):
         # notify challenge are met
         code, result = _send_signed_request(challenge['uri'], {
             "resource": "challenge",
+            "tls": True,
             "keyAuthorization": keyauthorization,
         })
         if code != 202: