starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-07-21 12:28:33 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

Option to specify own Root CA #437

New Issue
Closed
opened 2025-12-29 01:25:10 +01:00 by adam · 1 comment
adam commented 2025-12-29 01:25:10 +01:00
Owner
Copy Link
Copy Source

Originally created by @kbabioch on GitHub (Oct 8, 2019).

dehydrated will use curl for interaction with the ACME server. This will, by default, use the system store. There seems to be no option to specify the root certificate for the ACME server. This is a problem when running a private ACME implementation and not using the official Let's Encrypt one.

I could work around this by specifying CURL_OPTS for now (-k for instance), but it should be possible to do this via a command line parameter, i.e. something like (--root-ca).

Originally created by @kbabioch on GitHub (Oct 8, 2019). dehydrated will use curl for interaction with the ACME server. This will, by default, use the system store. There seems to be no option to specify the root certificate for the ACME server. This is a problem when running a private ACME implementation and not using the official Let's Encrypt one. I could work around this by specifying `CURL_OPTS` for now (`-k` for instance), but it should be possible to do this via a command line parameter, i.e. something like (`--root-ca`).
adam closed this issue 2025-12-29 01:25:10 +01:00
adam commented 2025-12-29 01:25:11 +01:00
Author
Owner
Copy Link
Copy Source

@lukas2511 commented on GitHub (Oct 9, 2019):

Why not just set --cacert ca.crt as curl opts in config? If you are using a custom CA you probably have a config file already anyways? I don't really see the point of adding it as a cli parameter, or am I missing something here? Going to close this as this already seems resolved to me.

@lukas2511 commented on GitHub (Oct 9, 2019): Why not just set `--cacert ca.crt` as curl opts in config? If you are using a custom CA you probably have a config file already anyways? I don't really see the point of adding it as a cli parameter, or am I missing something here? Going to close this as this already seems resolved to me.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Complicated
bug
enhancement
help wanted
pull-request
Mirrored from GitHub Pull Request
 suggestions wanted
testing
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#437