You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<span class="label label-info">Arguments :</span><pre class="prettyprint arguments"><fmt> is a Custom log format string (see <a href="#8.2.6">section 8.2.6</a>).</pre>
- The feature is limited to the HTTP-01 or DNS-01 challenges for now. HTTP-01
35046
-
is completely handled by HAProxy, but DNS-01 needs either the dataplaneAPI or
35047
-
another 3rd party tool to talk to a DNS provider API.
35049
+
Current limitations:
35050
+
- The feature is limited to the http-01, dns-01 or dns-persist-01 challenges
35051
+
for now. http-01 is completely handled by HAProxy, but dns-01 and
35052
+
dns-persist-01 needs either the dataplaneAPI or another 3rd party
35053
+
tool to talk to a DNS provider API. dns-persist-01 only needs the TXT entry
35054
+
to be set once, so it could be set manually without a tool.
35048
35055
- It is possible to start without an existing certificate on the disk. To do
35049
35056
so, the certificate must configured in a crt-store.
35050
35057
When using the "<span class="dropdown"><a class="dropdown-toggle" data-toggle="dropdown" href="#">acme<span class="caret"></span></a><ul class="dropdown-menu"><li class="dropdown-header">This keyword is available in sections :</li><li><a href="#acme%20%28Load%20options%29">Load options</a></li><li><a href="#acme%20%28ACME%29">ACME</a></li></ul></span>" keyword in a crt-store, a temporary key pair will be
Setting a too high value can trigger a warning if your machine is not
35084
35091
powerful enough. (This can be configured with "<a href="#warn-blocked-traffic-after">warn-blocked-traffic-after</a>"
35085
35092
but blocking the traffic too long could trigger the watchdog.)
35086
-
</pre><a class="anchor" name="challenge"></a><a class="anchor" name="12-challenge"></a><a class="anchor" name="12.8-challenge"></a><a class="anchor" name="challenge (Other sections)"></a><a class="anchor" name="challenge (ACME)"></a><div class="keyword"><b><a class="anchor" name="challenge"></a><a href="#12.8-challenge">challenge</a></b> <span style="color: #080"><string></span></div><pre class="text">Takes a challenge type as parameter, this must be http-01 or dns-01. When not
35087
-
used the default is http-01.
35093
+
</pre><a class="anchor" name="challenge"></a><a class="anchor" name="12-challenge"></a><a class="anchor" name="12.8-challenge"></a><a class="anchor" name="challenge (Other sections)"></a><a class="anchor" name="challenge (ACME)"></a><div class="keyword"><b><a class="anchor" name="challenge"></a><a href="#12.8-challenge">challenge</a></b> <span style="color: #080"><string></span></div><pre class="text">Takes a challenge type as parameter, this must be http-01, dns-01 or
35094
+
dns-persist-01. When not used the default is http-01.
35095
+
35096
+
dns-persist-01 implements draft-ietf-acme-dns-persist. Unlike dns-01, it
35097
+
uses a static TXT record at "_validation-persist.<domain>" that is set once
35098
+
and never changes between renewals. The record must contain the account URI
35099
+
and an optional policy. This challenge type does not require write access to
35100
+
the DNS provider API on each renewal.
35088
35101
</pre><a class="anchor" name="challenge-ready"></a><a class="anchor" name="12-challenge-ready"></a><a class="anchor" name="12.8-challenge-ready"></a><a class="anchor" name="challenge-ready (Other sections)"></a><a class="anchor" name="challenge-ready (ACME)"></a><div class="keyword"><b><a class="anchor" name="challenge-ready"></a><a href="#12.8-challenge-ready">challenge-ready</a></b> <span style="color: #080"><value></span><span style="color: #008">[,<span style="color: #080"><value></span>]</span>*</div><pre class="text">Configure the conditions that must be met before notifying the ACME server
35089
35102
that a dns-01 challenge is ready to be validated. Accepted values are:
0 commit comments