3 ms·
For people who want IP certificates, keep in mind that certbot doesn't support it yet, with a PR still open to implement it: https://github.com/certbot/certbot/
by gruez 10mo ago
For people who want IP certificates, keep in mind that certbot doesn't support it yet, with a PR still open to implement it: https://github.com/certbot/certbot/pull/10495 https://github.com/certbot/certbot/pull/10495
I think acme.sh supports it though.
- mcpherrinm 10mo agoSome ACME clients that I think currently support IP addresses are acme.sh, lego, traefik, acmez, caddy, and cert-manager. Certbot support should hopefully land pretty soon.
- sgtcodfish 10mo agocert-manager maintainter chiming in to say that yes, cert-manager should support IP address certs - if anyone finds any bugs, we'd love to hear from you! We also support ACME profiles (required for short lived certs) as of v1.18 which is our oldest currently supported[1] version. We've got some basic docs[2] available. Profiles are set on a per-issuer basis, so it's easy to have two separate ACME issuers, one issuing longer lived certs and one issuing shorter, allowing for a gradual migration to shorter certs. [1]: https://cert-manager.io/docs/releases/ https://cert-manager.io/docs/releases/ [2]: https://cert-manager.io/docs/configuration/acme/#acme-certificate-profiles https://cert-manager.io/docs/configuration/acme/#acme-certif...