Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't hardcode intermediate certificate #65

Open
zorun opened this issue Jan 11, 2021 · 1 comment
Open

Don't hardcode intermediate certificate #65

zorun opened this issue Jan 11, 2021 · 1 comment

Comments

@zorun
Copy link

zorun commented Jan 11, 2021

Related to #63 and #64 (ping @sbadia )

It's likely that Let's Encrypt will change its intermediate cert again to switch to ECDSA : https://letsencrypt.org/certificates/
It would be better to avoid hardcoding the intermediate in lecm. In fact, if Let's Encrypt start using several intermediate certs at the same time, lecm would be completely broken.

It should be possible to retrieve the right intermediate in the ACME response, but it's poorly documented. I found this doc which is quite sparse but gives the idea: https://letsencrypt.org/docs/integration-guide/

@zorun
Copy link
Author

zorun commented Jan 11, 2021

See also diafygi/acme-tiny#77

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant