Le Thu, Nov 14, 2024 at 02:30:24PM +0100, Kirill A. Korinsky a écrit :
> ports@,
> 
> I'd like to import another ACME client: acme.sh which is written as shell
> script (works on ksh) and supports a lot of DNS providers out of the box:
> https://github.com/acmesh-official/acme.sh/tree/master/dnsapi
> 
> At ports we have uacme, which also supports DNS-01 challenge as well, but it
> requires development of the script to support DNS providers which quite
> possible is supported by acme.sh
> 
> Tested on -current/amd64 against ClouDNS. Works like a charm.
> 
> Feedback? Ok?

I'd just like to stress loudly that by default acme.sh uses zerossl and
not letsencrypt CA, cf https://github.com/acmesh-official/acme.sh/wiki/Change-default-CA-to-ZeroSSL
dunno if thats better/worse but important to know imo.

im using acme.sh at work on debian against gandi API and dns-01 works
fine.

Landry