On 4/5/25 06:42, Lyle Giese via mailop wrote:
Let's Encrypt requires (according to documentation I have seen) Port 80 TCP be in use for verification.  I have no other legit use for Port 80 on this smart host and decided a long time ago, not to use Let's Encrypt for that reason.

That's true for the HTTP-01 challenge type, but Let's Encrypt also allows the use of other challenge types.

The DNS-01 challenge protocol verifies domain ownership through DNS by having you add a TXT record to your domain for each certificate request.

I found it a bit annoying to automate it but it's a better setup for me than running a bunch of otherwise-useless http servers.

See https://letsencrypt.org/docs/challenge-types/ for more information.


_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to