Complexity in dryrun for dns challenge #26

New Issue

Ghost · 2019-07-08T10:02:56Z

Ghost commented

2019-07-08 10:02:56 +00:00

Hi,

The dns challenge has a dry run that add's an unnecessary complexity to handle.

The dry run test is on different and random dns records, different to what letsencrypt require.

It would be great if the test can be done on the same (or at least on a fixed) dns row that letsencrypt required.

Would such a thing be possible to fix on your end?

Thanks

Hi, The dns challenge has a dry run that add's an unnecessary complexity to handle. The dry run test is on different and random dns records, different to what letsencrypt require. It would be great if the test can be done on the same (or at least on a fixed) dns row that letsencrypt required. Would such a thing be possible to fix on your end? Thanks

coolaj86 commented

2019-07-08 13:55:16 +00:00

Actually, it's important that it not be the same - otherwise you end up DNS cache poisoning yourself and the ACME challenges won't pass.

You can, however, turn the dry-run off completely.

I cleaned this all up when I created the browser port ( https://greenlock.domains/app/js/bluecrypt-acme.js ), however, I haven't ported it back to node yet (but I will, because ACME draft-18 requires some of the changes I made by November.

Actually, it's important that it *not* be the same - otherwise you end up DNS cache poisoning yourself and the ACME challenges won't pass. You can, however, turn the dry-run off completely. I cleaned this all up when I created the browser port ( https://greenlock.domains/app/js/bluecrypt-acme.js ), however, I haven't ported it back to node yet (but I will, because ACME draft-18 requires some of the changes I made by November.

Ghost commented

2019-07-08 14:03:46 +00:00

Thank you for the answer.

coolaj86 closed this issue

2019-08-05 20:05:04 +00:00

Sign in to join this conversation.

No Label

No Milestone

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: coolaj86/acme.js-ARCHIVED#26