3 ms·
Re the first point: The verification is specifically designed so it just involves fetching files and thus can be done through a folder served by the main webser
by detaro 5y ago
Re the first point: The verification is specifically designed so it just involves fetching files and thus can be done through a folder served by the main webserver. Certbot writes the challenge responses in that folder, informs LE that is has done so, the verification fetches them, your Apache serves them. Years ago when I first setup LE I think one needed to configure some of that manually for nginx (or maybe I just didn't trust it and decided to ignore the automatic setup? not sure).
- necovek 5y agoAll the arguments against this being extra work are pointing how it's possible to do it (extra work, ain't it?). In a nutshell, I agree and it's worth it to _me_. It is still extra work :) FWIW, my Apache is a reverse proxy to multiple VMs for each different service I run, so without pulling out my mod_rewrite skills out, "just serving a folder certbot can write to" is anything but.