-
-
Notifications
You must be signed in to change notification settings - Fork 93
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Did you find any provider for RFC8823 support / email-reply-00 challenges? #132
Comments
Hi Daniel! I'm sorry, but I don't know other CAs supporting it yet. This is why the support for RFC 8823 is still experimental in acme4j. It's mainly tested against the RFC via unit tests, but not field tested yet. I will let this issue open for a while. Maybe someone knows other CAs offering S/MIME certs via ACME protocol? |
Thanks for your quick feedback! You could test against -> https://acme.castle.cloud/ They have a staging and production environment. Their implementation does only support e-mail challenges from what it looks like. The interesting part is how you would use this in production.
Server needs to make sure the client provides it's identity as reliable way. For a small environment without a corporate e-mail server the client could do all the operations and hold the ACME account. But for a corporate environment, this would be the flow I would want to implement. But this would require CAs supporting it. |
@Daniel-Nashed For small environments, you could run your own ACME CA (server-side and client-side (older binaries)). Run the software using node.js. There is a docker container (https://hub.docker.com/r/platynum/certification-authority) providing this service, too. The documentation is a little bit hidden, but please find it here: Setup ACME S/MIME CA. |
Thanks for the tip! I am mainly interested in production use. But as long there is no widely trusted official CA (free or commercial), I can't implement it. The only missing component would be adding the challenge and intercepting the incoming messages. Nice to meet another ACME developer virtually! I should test our ACME client against your ACME server! |
Closing for inactivity. Feel free to reopen if necessary. |
I just discovered RFC8823 and I am quite excited, because it would be a game changer for e-mail encryption once widely adopted.
I don't see anyone providing it for trusted certificates. The only service I found so far is https://acme.castle.cloud/
They have a staging and production environment.
I don't see any of the larger CAs providing it.
Do you have any other providers you tested with and which we could use in production?
It's a quite young RFC, but I would have expected CA providers would jump on it quickly.
With EAB there would be ways to have accounts with payment options.
Do you have any additional providers I missed?
Thanks in advance!
Daniel
The text was updated successfully, but these errors were encountered: