Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for DNS01 validation using RFC-2136 #92

Open
anothertobi opened this issue Jun 15, 2022 · 1 comment
Open

Add support for DNS01 validation using RFC-2136 #92

anothertobi opened this issue Jun 15, 2022 · 1 comment
Labels
enhancement New feature or request

Comments

@anothertobi
Copy link
Contributor

anothertobi commented Jun 15, 2022

Context

To use DNS01 validation with an RFC-2136 compliant nameserver, a secret holding the TSIG key has to be created (see: https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/#configuration-step-2---set-up-cert-manager).
Further, a check like the acme-dns check should be added using nsupdate (see: https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/#using-nsupdate).

Alternatives

Not providing full integration for DNS validation using RFC-2136 in this component

@anothertobi anothertobi added the enhancement New feature or request label Jun 15, 2022
@anothertobi anothertobi changed the title Add support for TSIG key secret Add support for DNS01 validation using RFC-2136 Jun 15, 2022
@DebakelOrakel
Copy link
Contributor

RFC-2136 should be possible:

solvers:
  sec_dns01:
    dns01:
      rfc2136:
        nameserver: ns.example.com
        tsigKeyName: cert_manager_key
        tsigAlgorithm: HMACSHA512
        tsigSecretSecretRef:
          name: cert-manager-rfc2136
          key: tsig-key
    selector:
      dnsZones:
        - 'example.com'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants