Comments (10)
Any chance of having a new release to include this at some point soon? Lets Encrypt will stop issuing new certificates in less than 6 months and it would be a shame for this great tool to become obsolete.
from autoacme.
@JashanChittesh @RyanDansie The current release is actually using the ACMEv2 protocol (and it also supports DNS-based wildcard and SAN requests). However, it is not a .NET Core rewrite and it does not handle revocation, so it is still a 1.x version (but this is the AutoACME version, not the used ACME version). BTW I have not received an e-mail myself even though I received LE certificate reminders in the past, so I think this is indeed only sent to users who are still using an old, pre-1.6.0 release of AutoACME.
from autoacme.
Do you have a planning for this / an idea of a release date? :-)
from autoacme.
I'd like to see wildcard support, and it may not be as complicated as it seems. The DNS challenge can be redirected to any other record by the means of a CNAME entry (this is supported and works). Therefore you can apply a similar "catch-all technique" like you currently do for the HTTP challenge, you just need control over one (sub)domain which is used as container for all DNS challenges like so: *.example.org requires a DNS challenge _acme_challenge.example.org, which can be a CNAME to something like example.org.acme.company.org in a DNS zone acme.company.org which is controlled by AutoACME (by means of command line commands like dnscmd
, or even better a self-hosted DNS server in AutoACME itself).
If you merge my PR (which is a first step towards adding another challenge type) and implement ACME v2 protocol I'd be happy to try and implement the DNS challenge part.
from autoacme.
The changes in #33 addresses some of the v2 topics.
- ACMEv2 protocol is used
- Basic "manual" support for SAN certificates is built in (see #4 for details)
- Wildcard support is integrated
- Since wildcard support requires DNS challenges, this has also been implemented
from autoacme.
Any plans for a release of the ACMEv2 version?
from autoacme.
@NenoLoje Releases are in @ridercz responsibility. In the meantime you could build it yourself, my version with DNS, SAN and wildcards has been running successfully for weeks now in my environment.
from autoacme.
@ridercz Is wildcard support added? The read-me says no, but it looks like in Nov you added it...
from autoacme.
@bbakermmc Yes, wildcard has been merged into AutoACME. Wildcard however works only with DNS, please have a look at this wiki page:
https://github.com/ridercz/AutoACME/wiki/AutoACME-in-a-web-farm-environment#operation-with-dns-challenge
These changes were contributed by me and @ridercz may not yet found time to update the website and readme. ;)
from autoacme.
I have also received that email from letsencrypt.org, and currently, AutoACME is not listed as compatible client: https://letsencrypt.org/docs/client-options/
There were a few releases since 2018-11-28, where #33 was merged, so I'd assume that the current release (1.6.2 from 2019-03-14) should supports ACMEv2. I just updated (from 1.5.3), so hopefully all goes well.
@avonwyss Can you confirm? Also, with letsencrypt.org having sent out this message probably to everyone using an older version of AutoACME, it might be a good idea to change the main readme and, if possible, the release comments. And maybe have AutoACME added back to the official client list ;-)
from autoacme.
Related Issues (20)
- Full certificate chain in export HOT 10
- Getting 404 and AutoACME HTTP Error 403.14 - Forbidden HOT 1
- Remote Server Returned 404 Error Question HOT 9
- urn:acme:error:m alformed: Unable to update challenge :: provided key authorization was incorrect HOT 1
- Waiting for authorization.....Failed! HOT 3
- Request failed when adding a new host HOT 5
- Waiting for authorization....Failed! HOT 2
- Add support for IDN
- Version 1.6 error loading System.Net.HTTP HOT 2
- Failed to setup HOT 1
- Unable to connect to the remote server HOT 9
- Certificate renewal failure - Completing challenge...Challenge Invalid HOT 2
- Upgrade instructions: ACMEv1 to ACMEv2? HOT 8
- Save CRT and PEM certificates HOT 11
- IIS rewrite url is not work HOT 2
- Cert removed, Update failed HOT 5
- Obtaining an Elliptic Curve certificate from Let's Encrypt HOT 3
- Renewal of SSL certificate - Challenge Invalid (timeout during connect - likely firewall problem) HOT 5
- When running the Setup SFX, extract the files to a subdirectory HOT 5
- The remote name could not be resolved: 'acme-v02.api.letsencrypt.org' HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from autoacme.