Add support for wildcard certificates & ACME DNS01 #12

Open
opened 2023-12-01 09:06:01 +00:00 by quentin · 0 comments
Owner

Let's Encrypt has a rate limiting of 50 certificate orders per root domain and per week (moving average). As we offer domains under *.web.deuxfleurs.fr, this threshold can be easily reached. We should provision a wildcard certificate for these URL to reduce the pressure on LE. Wildcard certificates can not be obtained through the HTTP01 ACME challenge, only through the DNS01 one.

A specification need to be written before starting the implementation.

Let's Encrypt has a rate limiting of 50 certificate orders per root domain and per week (moving average). As we offer domains under `*.web.deuxfleurs.fr`, this threshold can be easily reached. We should provision a wildcard certificate for these URL to reduce the pressure on LE. Wildcard certificates can not be obtained through the HTTP01 ACME challenge, only through the DNS01 one. A specification need to be written before starting the implementation.
quentin changed title from Implement DNS01 to Implement ACME DNS01 2023-12-01 09:06:12 +00:00
quentin changed title from Implement ACME DNS01 to Add support for wildcard certificates & ACME DNS01 2023-12-01 09:09:08 +00:00
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Deuxfleurs/tricot#12
No description provided.