mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-13 15:13:33 +01:00
Option to specify own Root CA #437
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @kbabioch on GitHub (Oct 8, 2019).
dehydrated will use curl for interaction with the ACME server. This will, by default, use the system store. There seems to be no option to specify the root certificate for the ACME server. This is a problem when running a private ACME implementation and not using the official Let's Encrypt one.
I could work around this by specifying
CURL_OPTSfor now (-kfor instance), but it should be possible to do this via a command line parameter, i.e. something like (--root-ca).@lukas2511 commented on GitHub (Oct 9, 2019):
Why not just set
--cacert ca.crtas curl opts in config? If you are using a custom CA you probably have a config file already anyways? I don't really see the point of adding it as a cli parameter, or am I missing something here? Going to close this as this already seems resolved to me.