New ACME system abomination...

lordlex

Verified User
Joined
Aug 17, 2008
Messages
57
Location
Romania
Hello,

So... Since switching to the new Acme SSL certificate system, even if the domain use your associated name servers, if the website (domain.tld and www.domain.tld) points to WIX or any similar provider, or even a VPS on your own infrastructure, it is impossible to generate a wildcard certificate, even if "Prefer wildcard certificates" is selected...

Technically, from letsencrypt point of view, there is NO problem at all to use DNS validation and obtain a wildcard certificate... the only problem in this matter being the way DirectAdmin refactored the system...

So, what is the solution to this? How do I force to create of a wildcard certificate if the server itself control the DNS zone of a domain? Why is there no option to force issuing a wildcard if DNS validation is successful?

Is there a way to switch from lego to acme.sh, which I use on most manually managed servers, using some custom scripts/hooks? So instead of doing it's own thing with lego, to use a custom script I have to write, that use what I want in the background, and put the resulted file in the right place so DA won't have a problem of using them...


Best regards,
Daniel
 
Back
Top