blob: 0b35c17caf70b41bd02267bd760e58e11b43848e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
---
features:
- |
The ``letsencrypt-lego`` image now supports the ACME ``dns-01`` challenge
in addition to the existing ``http-01`` challenge. The
``letsencrypt-certificates`` script accepts a new ``--challenge`` option
(defaulting to ``http-01``) and, when ``dns-01`` is selected, a
``--dns-provider`` option naming any DNS provider supported by the bundled
``lego`` binary. An optional ``--dns-additional-opts`` passthrough allows
forwarding extra ``lego`` DNS flags (such as ``--dns.resolvers`` or
``--dns.propagation-disable-ans``) for environments where the default
authoritative name server propagation check cannot be performed. The
default behaviour is unchanged: without ``--challenge`` the ``http-01``
challenge is used exactly as before.
|