mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-11 22:30:44 +01:00
Support EAB without challengetype #648
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @gvde on GitHub (Sep 9, 2025).
Sectigo and Harica (and possibly others) support acme with eab without requiring a challengetype. The names allowed for the request are configured for the acme account.
Currently, we have to set a fake CHALLENGETYPE and comment out the first line of verify_config to use dehydrated.
@sbdlt commented on GitHub (Dec 2, 2025):
Same situation here.
No need to comment a line in verify_config, you can just use an existing challenge type and add a comment in the config file to remember that this has no use. No challenge will be made if the ACME endpoint does not need it.
@gvde commented on GitHub (Dec 2, 2025):
Not quite. If you set "http-01" you have to define a
WELLKNOWN, if you use "dns-01" you have to define aHOOK. Only for "tls-alpn-01" it would not require anything else. Either way, it's not nice nor intuitive.