News for hackers. Stuff that matters.

A comment on Nginx Introduces Native Support for Acme Protocol. Parent comment

Re:Nginx Introduces Native Support for Acme Protocol by bananapub on Wednesday August 13, 2025 @01:02PM (#44890988)
no you don't, you can just run https://github.com/joohoi/acme-dns anywhere, and then CNAME _acme_challenge.realdomain.com to aklsfdsdl239072109387219038712.acme-dns.anywhere.com. then your ACME client just talks to the ACME DNS api, which let's it do nothing at all aside from deal with challenges for that one long random domain.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by Arnavion on Wednesday August 13, 2025 @02:23PM (#44891993)
You can do it with an NS record, ie _acme_challenge.realdomain.com pointing to the DNS server that you can program to serve the challenge response. No need to make a CNAME and involve an additional domain in the middle.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by aflukasz on Wednesday August 13, 2025 @02:39PM (#44892174)
Yeah, but then you can just as well use http-01 with like same effort.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by gruez on Wednesday August 13, 2025 @02:56PM (#44892362)
no, because dns supports wildcard certificates, unlike http.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by aflukasz on Wednesday August 13, 2025 @03:16PM (#44892609)
Ah, good point.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by cpach on Wednesday August 13, 2025 @04:41PM (#44893586)
dns-01 is also good for services on a private network.
[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by rglullis on Wednesday August 13, 2025 @01:24PM (#44891231)
I've been hoping to get ACME challenge delegation on traefik working for years already. The documentation says it supports it, but it simply fails every time.

If you have any idea how this tool would work on a docker swarm cluster, I'm all ears.

[ Parent | on HN ]
Re:Nginx Introduces Native Support for Acme Protocol by 8organicbits on Wednesday August 13, 2025 @06:29PM (#44894636)
There's a SaaS version as well, if you don't want to self-host.

https://docs.certifytheweb.com/docs/dns/providers/certifydns...

[ Parent | on HN ]