3 ms·
I'd love to hear how exactly they'd pull that off.
by rootusrootus 3y ago
I'd love to hear how exactly they'd pull that off.
- blueflow 3y agoIn Linux, you can do a dstaddr/dstport based redirect in the iptables FORWARD chain to your own http server and serve the ACME challenge/response things from there. This is basically a transparent proxy setup.
- rootusrootus 3y agoWhat does that buy you? The challenge is merely an authorization, intercepting it does not get you a certificate.
- blueflow 3y agoWhat else would i need to request the certificate?