Is AutoTLS working for anyone after the recent LetsEncrypt revokation?

[zacpod]

Stopped working for me, and now just getting loads of TLS errors:
e.g.
echo: http: TLS handshake error from IP:64343: acme/autocert: unable to satisfy "https://acme-v02.api.letsencrypt.org/acme/authz-v3/ID" for domain "hostname": no viable challenge type found
echo: http: TLS handshake error from IP:52233: EOF

[aldas]

Probably belongs to https://github.com/golang/crypto as Echo uses it for autocert stuff

This is example without Echo.StartTLS and allows you complete control over http.Server and cert manager

func main() {
	e := echo.New()
	e.Use(middleware.Recover())
	e.Use(middleware.Logger())
	e.GET("/", func(c echo.Context) error {
		return c.HTML(http.StatusOK, `
			<h1>Welcome to Echo!</h1>
			<h3>TLS certificates automatically installed from Let's Encrypt :)</h3>
		`)
	})

	autoTLSManager := autocert.Manager{
		Prompt: autocert.AcceptTOS,
		// Cache certificates to avoid issues with rate limits (https://letsencrypt.org/docs/rate-limits)
		Cache: autocert.DirCache("/var/www/.cache"),
		//HostPolicy: autocert.HostWhitelist("<DOMAIN>"),
	}
	s := http.Server{
		Addr:    ":443",
		Handler: e, // set Echo as handler
		TLSConfig: &tls.Config{
			//Certificates: nil, // <-- s.ListenAndServeTLS will populate this field
			GetCertificate: autoTLSManager.GetCertificate,
			NextProtos:     []string{acme.ALPNProto},
		},
		//ReadTimeout: 30 * time.Second, // use custom timeouts
	}
	if err := s.ListenAndServeTLS("", ""); err != http.ErrServerClosed {
		e.Logger.Fatal(err)
	}
}

[zacpod]

Thanks, I'll give that a try.

[eranchetz]

This indeed solved it for me, thank you for the update (I think the recipe requires clarification that there are 2 ways to work with auto TLS)