Added option to skip challenge verification when getting Let's Encrypt certificate.
Ylian Saint-Hilaire committed
Nov 24, 2021 at 21:39 UTC
02978e19721944c389471ee4453d4c92e0dd3c97
3 files changed
+3
letsencrypt.js
+1
@@ -186,6 +186,7 @@ module.exports.CreateLetsEncrypt = function (parent) {
186
csr,
187
email: obj.parent.config.letsencrypt.email,
188
termsOfServiceAgreed: true,
189
+ skipChallengeVerification: (obj.parent.config.letsencrypt.skipchallengeverification === true),
190
challengeCreateFn,
191
challengeRemoveFn
192
}).then(function (cert) {
meshcentral-config-schema.json
+1
@@ -858,6 +858,7 @@
858
"properties": {
859
"email": { "type": "string", "format": "email", "description": "Email address of the administrator of this server. Make sure this is a valid email address otherwise the certificate request will fail." },
860
"names": { "type": "string" },
861
+ "skipChallengeVerification": { "type": "boolean", "default": false, "description": "By default, MeshCentral will perform a self-test to make sure HTTP port 80 can respond correctly before making a request to Let's Encrypt. In some cases, this self-test can't work and must be skipped." },
862
"production": { "type": "boolean", "default": false, "description": "By default a test certificate will be obtained from Let's Encrypt. Always start by getting a test certificate and make sure that works before setting this to true and obtaining a production certificaite. Making too many bad requests for a production certificate will get you banned for a long period of time." }
863
},
864
"required": [ "email", "names" ]
sample-config-advanced.json
+1
@@ -442,6 +442,7 @@
442
"__comment__": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
443
"email": "myemail@myserver.com",
444
"names": "myserver.com,customer1.myserver.com",
445
+ "skipChallengeVerification": false,
446
"production": false
447
},
448
"_peers": {