Skip to content
This repository has been archived by the owner on Dec 21, 2019. It is now read-only.

Support ACME V2 API and wildcard certificates #69

Open
tazjin opened this issue Jul 7, 2017 · 5 comments
Open

Support ACME V2 API and wildcard certificates #69

tazjin opened this issue Jul 7, 2017 · 5 comments

Comments

@tazjin
Copy link
Owner

tazjin commented Jul 7, 2017

These are coming in January 2018 and it would be cool to have support right away: https://letsencrypt.org/2017/06/14/acme-v2-api.html

Gotta see if the ACME lib will be updated or if this is my problem to deal with!

@tazjin
Copy link
Owner Author

tazjin commented Jan 20, 2018

Update on this:

acme4j has been updated and there is a pending 2.0 release (currently available as a snapshot release), which will be released in stable form before Let's Encrypt launches their V2 service at the end of February.

Wildcard certificate support has been added in that library, too, but I haven't yet investigated which changes to the DNS responders (if any) are required for it.

@joeherwig
Copy link

Production endpoint is available now.
https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578
So probably worth checking?

@tazjin
Copy link
Owner Author

tazjin commented Mar 26, 2018

@joeherwig Yep, it's on the TODO-list. I won't have time before the end of next week though.

If any changes (other than a version bump of the ACME-lib) are required, PRs are welcome!

@mansona
Copy link

mansona commented May 28, 2018

@tazjin I'd be interested in helping get this off the ground if you could give me some guidance and point me in the right direction of how to get started 👍

@tazjin
Copy link
Owner Author

tazjin commented May 28, 2018

@mansona Hey! As far as I know acme4j (the upstream library this project uses for speaking to Let's Encrypt) has been updated with support for wildcard certificates, so the first step is to update the library version used by the controller.

It'll probably become obvious at that point what needs to be done to support wildcard certificates (most likely some changes to how it decides where to create the verification records etc.)

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants