acme.sh and certificate deployment
olivier2553 at gmail.com
Sat Jul 28 13:16:58 UTC 2018
> I like the fact that acme.sh can do a wildcard certificate as I only
> need one for the tld and not x for all subdomains. I do like that fact
> that it also can handle ECC curves.
If I remember well what I read about wildcard certificates, and unless
it has changed, only DNS authentication is supported. So unless you
wrote your full script deployment, you have to do it by hand because
the challenge to put in DNS is changing each time you want to renew.
But it is very straight forward to use LE certificates for Apache,
Postfix and I have not tried Dovecot :0
More information about the freebsd-questions