Stuart Oram (Customer) asked a question.

Let's Encrypt - DNS CNAME Delegation

Using LM in my home network but as "prod" rather than a lab, so I have a couple of family members hanging off it.

 

I'm trying to get things to a place where manual maintenance tasks are minimal, so services they depend on can keep running for at least a while in the event I'm in a position where I'm no longer able to maintain it.

 

I'm currently using another ACME client which supports CNAME delegation to another domain for DNS validation (I've moved the DNS zone for one of my domains to CloudFlare Free since my current provider doesn't support automation).

 

It's currently manageable to export the wildcard cert and import into LM every 90 days but I'm looking for a better way. However it seems LM doesn't support the CNAME delegation and I don't want to move the main domain's DNS zone.

 

Am I missing something such that this is already possible, or is it possible to make this a feature request? I see there are plans for an alternative DNS validation approach which allows a fixed key to be used - are there plans for LM to support this when available?


  • Andrew Spagnuolo (Progress Software)

    Hi Stuart,

     

    DNS-01 was added for wild card certificates only. Setup for this is discussed in our article here. There's currently a feature request were looking to implement eventually which will enable using it for non-wild card certificates as well.

     

    Let me know if you have any other questions.

     

    Best Regards,

    Selected as Best
  • Andrew Spagnuolo (Progress Software)

    Hi Stuart,

     

    DNS-01 was added for wild card certificates only. Setup for this is discussed in our article here. There's currently a feature request were looking to implement eventually which will enable using it for non-wild card certificates as well.

     

    Let me know if you have any other questions.

     

    Best Regards,

    Selected as Best