DNS validation needs someone (or a DNS plugin for Certbot) to add a DNS record each time the certificate renews (by default Certbot renews 30 days before expiration. This works very well if your DNS provider is supported by one of certbot's plugins, but not as well if you have to update it manually. I'm not sure if there is a way to integrate it into our current DNS setup.
On Fri, Oct 7, 2022 at 2:09 PM Stephen Smoogen <ssmoo...@redhat.com> wrote: > > > On Fri, 7 Oct 2022 at 14:39, Nick Bebout <n...@bebout.net> wrote: > >> I don't think we can (easily) make it keep renewing the Let's Encrypt >> cert, as LE requires DNS validation for wildcard certs. I did the >> validation manually. I could probably patch Ansible to not overwrite my >> config changes, if we want to go that route. >> >> > What is needed for DNS validation? A constantly updated DNS record or > something else? > > > -- > Stephen Smoogen, Red Hat Automotive > Let us be kind to one another, for most of us are fighting a hard battle. > -- Ian MacClaren > _______________________________________________ > infrastructure mailing list -- infrastructure@lists.fedoraproject.org > To unsubscribe send an email to > infrastructure-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
_______________________________________________ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
