starred/godoxy-yusing
1
0
Fork 0
mirror of https://github.com/yusing/godoxy.git synced 2026-01-14 07:33:36 +01:00
Code Issues 18 Packages Projects Releases 10 Wiki Activity

Please provide more information about autocert and type of SSL certs created #32

New Issue
Closed
opened 2025-12-29 14:22:41 +01:00 by adam · 6 comments
adam commented 2025-12-29 14:22:41 +01:00
Owner
Copy Link

Originally created by @FoxxMD on GitHub (Jan 31, 2025).

The readme, certs wiki page, and dns providers wiki page do not specify some basic information about what autocert entails. Please clarify these points:

  • Is autocert an ACME client implementation?
  • Are the SSL certs being generated for internal or external use?
    • IE IF i use cloudflare dns provider am I generating a CF origin cert or a true SSL cert for public use?
  • If generating a true SSL cert, is the provider LetsEncrypt? If not, then what? Are there other providers available to use?
  • Does autocert automatically renew certs when they are close to expiration? Does it renew every time the container is started? Do I have to manually renew?
  • If I specify multiple domains for autocert does it generate one cert for multiple domains or one cert per domain?
Originally created by @FoxxMD on GitHub (Jan 31, 2025). The readme, [certs wiki page](https://github.com/yusing/go-proxy/wiki/Certificates-and-domain-matching), and [dns providers wiki page](https://github.com/yusing/go-proxy/wiki/Supported-DNS%E2%80%9001-Providers) do not specify some basic information about what autocert entails. Please clarify these points: * Is autocert an [ACME client implementation?](https://letsencrypt.org/docs/client-options/) * Are the SSL certs being generated for internal or external use? * IE IF i use cloudflare dns provider am I generating a [CF origin cert](https://developers.cloudflare.com/ssl/origin-configuration/origin-ca/) or a true SSL cert for public use? * If generating a true SSL cert, is the provider LetsEncrypt? If not, then what? Are there other providers available to use? * Does autocert automatically renew certs when they are close to expiration? Does it renew every time the container is started? Do I have to manually renew? * If I specify multiple domains for autocert does it generate one cert for multiple domains or one cert per domain?
adam closed this issue 2025-12-29 14:22:41 +01:00
adam commented 2025-12-29 14:22:42 +01:00
Author
Owner
Copy Link

@yusing commented on GitHub (Jan 31, 2025):

Sorry for the confusion, let me clarify it:

Is autocert an ACME client implementation?

autocert uses https://github.com/go-acme/lego, just like Traefik and similar go written reverse proxies. It grabs a cert using ACME and Let's Encrypt by DNS-01 challenge.

Are the SSL certs being generated for internal or external use

SSL certs obtained are for external use

is the provider LetsEncrypt

Yes, as stated in point 1

If I specify multiple domains for autocert does it generate one cert for multiple domains or one cert per domain?

ALl domains in one cert. (Stated here https://github.com/yusing/go-proxy/wiki/Certificates-and-domain-matching#certificates)

@yusing commented on GitHub (Jan 31, 2025): Sorry for the confusion, let me clarify it: > Is autocert an [ACME client implementation?](https://letsencrypt.org/docs/client-options/) autocert uses https://github.com/go-acme/lego, just like Traefik and similar go written reverse proxies. It grabs a cert using ACME and Let's Encrypt by DNS-01 challenge. > Are the SSL certs being generated for internal or external use SSL certs obtained are for external use > is the provider LetsEncrypt Yes, as stated in point 1 > If I specify multiple domains for autocert does it generate one cert for multiple domains or one cert per domain? ALl domains in one cert. (Stated here https://github.com/yusing/go-proxy/wiki/Certificates-and-domain-matching#certificates)
adam commented 2025-12-29 14:22:42 +01:00
Author
Owner
Copy Link

@FoxxMD commented on GitHub (Jan 31, 2025):

Thank you for the clarification! Might be worth adding that to the wiki ;)

@FoxxMD commented on GitHub (Jan 31, 2025): Thank you for the clarification! Might be worth adding that to the wiki ;)
adam commented 2025-12-29 14:22:42 +01:00
Author
Owner
Copy Link

@yusing commented on GitHub (Jan 31, 2025):

Thanks for pointing it out, I've added it to Wiki.

@yusing commented on GitHub (Jan 31, 2025): Thanks for pointing it out, I've added it to Wiki.
adam commented 2025-12-29 14:22:43 +01:00
Author
Owner
Copy Link

@FoxxMD commented on GitHub (Jan 31, 2025):

Sorry I may have closed the issue too fast. Can you provide any details on this?

Does autocert automatically renew certs when they are close to expiration? Does it renew every time the container is started? Do I have to manually renew?

@FoxxMD commented on GitHub (Jan 31, 2025): Sorry I may have closed the issue too fast. Can you provide any details on this? > Does autocert automatically renew certs when they are close to expiration? Does it renew every time the container is started? Do I have to manually renew?
adam commented 2025-12-29 14:22:43 +01:00
Author
Owner
Copy Link

@yusing commented on GitHub (Jan 31, 2025):

autocert automatically renew certs 1 month before expiration, 1 hour cooldown for every failed requests.

It only renew when these conditions are met:

  • autocert.domains does not match current certs
  • certs are about to expire in a month

So

Does it renew every time the container is started

No, it renews only when it have to.

Do I have to manually renew?

No, you don't have to.

@yusing commented on GitHub (Jan 31, 2025): autocert automatically renew certs 1 month before expiration, 1 hour cooldown for every failed requests. It only renew when these conditions are met: - `autocert.domains` does not match current certs - certs are about to expire in a month So > Does it renew every time the container is started No, it renews only when it have to. > Do I have to manually renew? No, you don't have to.
adam commented 2025-12-29 14:22:43 +01:00
Author
Owner
Copy Link

@FoxxMD commented on GitHub (Jan 31, 2025):

Thank you!

@FoxxMD commented on GitHub (Jan 31, 2025): Thank you!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
pull-request
Mirrored from GitHub Pull Request
 wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/godoxy-yusing#32
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?