aboutsummaryrefslogtreecommitdiff
path: root/releasenotes/notes/letsencrypt-dns01-challenge-432b5122dc832f4a.yaml
blob: 0b35c17caf70b41bd02267bd760e58e11b43848e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
---
features:
  - |
    The ``letsencrypt-lego`` image now supports the ACME ``dns-01`` challenge
    in addition to the existing ``http-01`` challenge. The
    ``letsencrypt-certificates`` script accepts a new ``--challenge`` option
    (defaulting to ``http-01``) and, when ``dns-01`` is selected, a
    ``--dns-provider`` option naming any DNS provider supported by the bundled
    ``lego`` binary. An optional ``--dns-additional-opts`` passthrough allows
    forwarding extra ``lego`` DNS flags (such as ``--dns.resolvers`` or
    ``--dns.propagation-disable-ans``) for environments where the default
    authoritative name server propagation check cannot be performed. The
    default behaviour is unchanged: without ``--challenge`` the ``http-01``
    challenge is used exactly as before.