Comment on Centralized SSL certificate management?
bigredgiraffe@lemmy.world 1 week ago
Tools mentioned here are good suggestions but the problem you are going to run into is that CloudFlare doesn’t support second or higher level dns zones (so a record of a.b.c.com should be in a zone of b.c.com and CF only allows c.com) on most account tiers and LE/certbot is expecting a zone to create the validation record using its plugin.
KairuByte@lemmy.dbzer0.com 1 week ago
Oh… boy, that’s an angle I hadn’t considered.
Doesnt any dns challenge currently just look at domain.com to see if it can create the lower cert?
bigredgiraffe@lemmy.world 6 days ago
Some of the acme clients do, I don’t think certbot does though. I remember using acme.sh or something and I think it calls it a delegation domain if I remember correctly!