diff --git a/install_scripts/app.py b/install_scripts/app.py
index b522c317..1d9b3524 100644
--- a/install_scripts/app.py
+++ b/install_scripts/app.py
@@ -66,6 +66,22 @@ def get_metricz():
     return ''
 
 
+@app.route('/.well-known/acme-challenge/<challenge>')
+def get_acme_challenge_response(challenge):
+    response = helpers.get_acme_challenge_response(challenge)
+    if response == '':
+        return Response('', status=404)
+    return Response(response, mimetype='text/plain')
+
+
+@app.route('/.well-known/cf-custom-hostname-challenge/<challenge>')
+def get_domain_challenge_response(challenge):
+    response = helpers.get_domain_challenge_response(challenge)
+    if response == '':
+        return Response('', status=404)
+    return Response(response, mimetype='text/plain')
+
+
 @app.route('/docker-install.sh')
 def get_docker():
     docker_version = helpers.get_arg('docker_version',
diff --git a/install_scripts/helpers.py b/install_scripts/helpers.py
index 1cfce050..ea821604 100644
--- a/install_scripts/helpers.py
+++ b/install_scripts/helpers.py
@@ -82,6 +82,34 @@ def get_arg(name, dflt=None):
     return make_shell_safe(request.args.get(name)) if request.args.get(name) else dflt
 
 
+def get_acme_challenge_response(challenge):
+    cursor = db.get().cursor()
+    query = ('SELECT tls_http_body FROM vendor_team_custom_hostname WHERE tls_acme_challenge = %s')
+    cursor.execute(query, (challenge, ))
+    row = cursor.fetchone()
+    cursor.close()
+
+    tls_http_body = ''
+    if row is not None:
+        (tls_http_body, ) = row
+
+    return tls_http_body
+
+
+def get_domain_challenge_response(challenge):
+    cursor = db.get().cursor()
+    query = ('SELECT domain_challenge_response FROM vendor_team_custom_hostname WHERE domain_challenge = %s')
+    cursor.execute(query, (challenge, ))
+    row = cursor.fetchone()
+    cursor.close()
+
+    domain_challenge_response = ''
+    if row is not None:
+        (domain_challenge_response, ) = row
+
+    return domain_challenge_response
+
+
 def get_pinned_docker_version(replicated_version, scheduler):
     version_info = semver.parse(replicated_version, loose=False)
     cursor = db.get().cursor()