Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ACME Autocert tls-sni-01 deprecated #283

Closed
Signorini opened this issue May 11, 2019 · 3 comments
Closed

ACME Autocert tls-sni-01 deprecated #283

Signorini opened this issue May 11, 2019 · 3 comments

Comments

@Signorini
Copy link

Hello I trie to use tls auto cert configs, but received the error.

TLS handshake error from XXX: acme/autocert: unable to authorize "XXX"; tried ["tls-sni-02" "tls-sni-01"]

Little reserach lets encrypt stop to accept the tls-sni-01
https://www.digitalocean.com/community/questions/let-s-encrypt-acme-tls-sni-01-end-of-life

How I can force to stop using tls-sni-01?

My config is:

{
  "secret": "",
  "api_key": "",
  "admin_password": "",
  "admin_secret": "",
  "tls_autocert": true,
  "tls_autocert_cache_dir": "/tmp/certs",
}

thanks

@FZambia
Copy link
Member

FZambia commented May 11, 2019

Hello, Centrifugo supports http-01 at moment - see docs on how to enable it (you will need 80 port open in this case). Though looks like there is new tls-alpn-01 challenge we should enable instead of tls-sni-01.

@FZambia
Copy link
Member

FZambia commented May 15, 2019

@Signorini just merged related pr to support tls-alpn-01 - will be in next release, unfortunately I have no chance to check it out on live domain.

@Signorini
Copy link
Author

Thanks @FZambia - For now I use http-01 and works, after I will update centrifugo and use alpn method. [my concerns regarding http-01 its need to open a new port on firewall only to validate things, its not the best scenario but works].

thanks again

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants