2 ms·
In Linux, you can do a dstaddr/dstport based redirect in the iptables FORWARD chain to your own http server and serve the ACME challenge/response things from th
by blueflow 3y ago
In Linux, you can do a dstaddr/dstport based redirect in the iptables FORWARD chain to your own http server and serve the ACME challenge/response things from there. This is basically a transparent proxy setup.
- rootusrootus 3y agoWhat does that buy you? The challenge is merely an authorization, intercepting it does not get you a certificate.
- blueflow 3y agoWhat else would i need to request the certificate?