News for hackers. Stuff that matters.

A comment on Let's Encrypt is offering 6-day and IP address certs. Parent comment

Re:Let's Encrypt is offering 6-day and IP address certs by telotortium on Thursday January 16, 2025 @05:57PM (#42731977)
Speaking of the topic of automation, does anyone know of a domain registry that is suitable for issuing Let's Encrypt certificates for a machine behind a firewall (which requires using the DNS challenge)? I currently use Namecheap, but they started requiring you to manually whitelist the client IP address to use their API, which is annoying when your residential ISP changes your IP address.

Edit: seems like using Cloudflare as the DNS host is the way to go here. Thanks everyone!

[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by jchw on Thursday January 16, 2025 @06:05PM (#42732064)
If you are not allergic to Cloudflare, they work very well with the DNS-01 challenge and they provide both registrar services as well as DNS. Of course, you can use Namecheap domains with Cloudflare or any other DNS provider and that should solve your problem too.
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by jhart99 on Thursday January 16, 2025 @06:05PM (#42732062)
Cloudflare has worked quite well for me as a DNS host. You don't need to have the registrar host the DNS records.
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by birdman3131 on Thursday January 16, 2025 @06:04PM (#42732052)
Digital ocean can be used as name servers without paying and they have an API. No clue how compatible.
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by coffee-- on Thursday January 16, 2025 @10:40PM (#42733845)
I use Digital Ocean via Caddy and acme.sh with no problems
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by bruce511 on Thursday January 16, 2025 @10:34PM (#42733816)
I use DNSimple.com - it's working well, and has a stable API that can let you do anything.
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by BrandoElFollito on Friday January 17, 2025 @04:05AM (#42735492)
OVH works fine too
[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by throw0101c on Friday January 17, 2025 @10:27AM (#42738516)
> Speaking of the topic of automation, does anyone know of a domain registry that is suitable for issuing Let's Encrypt certificates for a machine behind a firewall (which requires using the DNS challenge)?

Here's a utility (and library) that can talk to several dozen APIs for DNS updates (use it as a hook in your ACME client):

* https://github.com/dns-lexicon/dns-lexicon

* Previously at: https://github.com/AnalogJ/lexicon

[ Parent | on HN ]
Re:Let's Encrypt is offering 6-day and IP address certs by attentive on Monday January 20, 2025 @12:14AM (#42765190)
you can use ACME DNS i.e. https://github.com/joohoi/acme-dns which is supported by lego.
[ Parent | on HN ]