Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent some troubles with dig +trace / dig +short and certbot --dry-run #81

Open
camlafit opened this issue Dec 9, 2024 · 0 comments

Comments

@camlafit
Copy link
Collaborator

camlafit commented Dec 9, 2024

Hello

This plugin use actually certbot --dry-run to check whether certificate could be generate to each host. This solution is very long as we do a full let's encrypt test.
Dry-run is a test mode then at any moment Let's encrypt could be change theirs responses and could be no more accurate.

dig +trace used previously in some case stop to CNAME response and return any final IN A.
alternc-nginx-ssl use a workaround with dig +short but in this case it's sensible to any resolver cache.

We must improve this test to be faster and more accurate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant