Issue with TLS-ALPN-01 Validation Method

Re:Issue with TLS-ALPN-01 Validation Method by rswail on Wednesday January 26, 2022 @08:25AM (#30085089)

certbot is just one of many, many ACME clients and libraries now available.

If you don't like how the nginx plugin works, then fork it.

Wrapping "certbot renew && nginx -s HUP" into a systemd service doesn't seem to be a very complex thing to do.

[ Parent | on HN ]

Re:Issue with TLS-ALPN-01 Validation Method by kijin on Wednesday January 26, 2022 @09:52PM (#30095613)

That's very close to what I'm doing, except I now refuse to touch certbot with a 10-foot pole. Plenty of better, do-one-thing-well, non-paternalistic ACME clients out there as you said.

The fact that there are alternatives, though, doesn't mean that the crappy "official" client isn't doing the LE ecosystem a disservice.

[ Parent | on HN ]