4 ms·
Just for clarification those are two distinct issues. One: the LE client's apache magic fix up code can fail to handle fairly standard configs and mess things u
by sleepychu 10y ago
Just for clarification those are two distinct issues.
One: the LE client's apache magic fix up code can fail to handle fairly standard configs and mess things up.
I addressed this directly, you don't need to use the apache magic configuration.
Two: ACME offers numerous ways to convince it that you own a domain name.
My intent was to follow this up by saying you don't even need to be running an ACME client/mess with your apache config at all by using the dns-01 challenge variant over the http-01 variant.
> The key is that Lets Encrypt can be very difficult to configure and get things working.
This is definitely a problem, it would be great to see a divorce between the apache config munger and the certificate fetcher. SSL available to the uninitiated is great but if they're on the command line then I'd like to believe they're capable of pointing their server at a specific location for certificates on disk.