-
-
Notifications
You must be signed in to change notification settings - Fork 263
Description
Is your feature request related to a problem? Please describe.
Some of our clients want to use their own domain names when interacting with our app, which requires them to bring their own SSL certificate. One of our more recent clients is using a LetsEncrypt cert which would be a real pain for us to manage with the relatively short expiration, so I'd prefer to automate it.
However, we don't control their DNS records. My hope was that we could get them to do a CNAME
from _acme-challenge.<theirdomain>
to _acme-challenge.<client>.<ourdomain>
which would then allow us to automate renewals using this tool, but I'm unsure whether this tool could support that because the DNS Zones wouldn't match(?)
Describe the solution you'd like
Some configuration option at a certificate level to say "Don't use _acme-challenge.<domain>
, use this instead".