Comment on How do you all handle port 80 and HTTP-01/DNS-01 challenges for Let's Encrypt cert renewals?
BennyInc@feddit.org 3 hours ago
If you use DNS-01, you don’t need port 80 open.
Comment on How do you all handle port 80 and HTTP-01/DNS-01 challenges for Let's Encrypt cert renewals?
BennyInc@feddit.org 3 hours ago
If you use DNS-01, you don’t need port 80 open.
tinfoilsocks@lemmy.ml 3 hours ago
Oh. So, that’s only needed for HTTP-01 challenges? Doesn’t my server need to receive a file or something from Let’s Encrypt, how does that work?
theit8514@lemmy.world 3 hours ago
The ACME client generates the private key to keep and a signing request to send to the CA. Once the CA validates your challenge type, the client requests the signed cert over that same channel. It doesn’t interact with 80 or 443 except to complete challenges.