JOduMonT
(Jonathan Dumont)
March 20, 2022, 3:04am
1
@giacomo I saw you questioned yourself about DNS Challenge for the v7
I’d think it is. Better if you could also add support for acme-dns, though admittedly the UI to integrate that hook script would be a little more complicated. OTOH, acme-dns lets just about anyone use the DNS challenge. If it’s going to be CLI-only, I don’t know that it’d add anything that I didn’t write up almost three years ago at https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_for_internal_servers (though I used acme.sh there rather than certbot–still not a fan of certbot)…
And then, as sadly, like, I must admit, probably few of us, my ISP bloc (for my own good ) the port 80; and so the HTTP Challenge is not possible; so that bring me the question: is Let’s Encrypt certificate via DNS challenge is planned?
2 Likes
danb35
(Dan)
March 20, 2022, 10:00am
2
I thought I’d seen an announcement that such support was released, at least for a few DNS providers, but now I can’t find it. But it can always be done from the CLI:
https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_for_internal_servers
…and if you don’t have a supported DNS provider (and you’re not willing or able to change to one):
https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_acme-dns
2 Likes
giacomo
(Giacomo Sanchietti)
March 21, 2022, 7:53am
3
Take a look at this: nethserver-base — NethServer 7 documentation
Please note that EPEL ships an old version of certbot, so not all providers are supported.