Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Alternative name for module #46

Closed
Sp1l opened this issue Sep 10, 2017 · 2 comments
Closed

Alternative name for module #46

Sp1l opened this issue Sep 10, 2017 · 2 comments

Comments

@Sp1l
Copy link
Contributor

Sp1l commented Sep 10, 2017

Suggest to rename the module to mod_acme as it implements the ACME protocol. This name was also suggested by Mozilla. It looks like the module leaves the addition alternative certificate management protocols open for now which would be an indication to not use mod_acme.

The added callback-mechanisms in mod_ssl would allow other certificate auto-renewal mechanisms to be implemented by other parties.

For me personally, md is Message Digest (md5. libmd) and the module doesn't manage the domain for me, only the certificate.

Old Directive New Directive
MDCertificateAgreement AcmeAgreement
MDCertificateAuthority AcmeCertificateAuthority
MDCertificateProtocol AcmeCertificateProtocol
MDDriveMode AcmeDriveMode
MDRenewWindow AcmeRenewWindow
MDMember AcmeMember

AcmeCertificateProtocol ACME is redundant...

@icing
Copy link
Owner

icing commented Sep 11, 2017

I can see at minimum also a 'external' provider where mod_md monitors certificate expiry and allows simpler configuration and certificate updates are imported via a2md into the local store.

In that way, I see it as more than an ACME implementation and I find the name too restricting. If md is a good name, well, that can of course be argued. Probably all short names have overlaps with some tech abbreviations, so that should not really hinder us.

And besides the certificate, it should offer management of all security related configurations of an MD. Which is a little bit more high level concept than what mod_ssl is dealing with, as it applies across VirtualHosts (potentially). Also, migration support from http: to https: get addresses at the moment.

HTTP Alternate Services is another topic that would fit.

@Sp1l
Copy link
Contributor Author

Sp1l commented Sep 12, 2017

Makes sense :D Let's close this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants