From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: bug#32845: guix.info: Missing manual Date: Fri, 28 Sep 2018 22:38:08 +0200 Message-ID: <87mus1bbnz.fsf@elephly.net> References: <87y3bolf9v.fsf@ambrevar.xyz> <874lect9x0.fsf@elephly.net> <87efdgjb7h.fsf@ambrevar.xyz> <87zhw4rpel.fsf@elephly.net> <87ftxv3vf4.fsf@gnu.org> <87r2hfrmcf.fsf@elephly.net> <87h8i91jaq.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59262) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1g7RI3-00044i-6I for bug-guix@gnu.org; Tue, 02 Oct 2018 16:29:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1g7RHz-0005uS-9g for bug-guix@gnu.org; Tue, 02 Oct 2018 16:29:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:58691) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1g7RHy-0005sp-Q2 for bug-guix@gnu.org; Tue, 02 Oct 2018 16:29:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1g7RHy-0002lf-KO for bug-guix@gnu.org; Tue, 02 Oct 2018 16:29:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-reply-to: <87h8i91jaq.fsf@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: Pierre Neidhardt , 32845@debbugs.gnu.org Ludovic Court=C3=A8s writes: >> The problem with naive Let=E2=80=99s Encrypt updates is that automatic >> challenges might fail when the =E2=80=9Cwrong=E2=80=9D server is returne= d by the DNS >> server. =E2=80=9Ccertbot=E2=80=9D can be used with manual DNS validatio= n, which >> requires us to deploy a DNS TXT record. This can be automated with >> certbot hooks (scripts that have access to the token that should be >> published via environment variables) or through JSON mode, which returns >> an object with the token that can be processed through other means. > > I didn=E2=80=99t know about all this! Looks like our Certbot service doe= sn=E2=80=99t > support it though? That=E2=80=99s right. The question is what we want to do in the auth hook = when this is performed in the service. We could just punt and have the user supply the path to a custom hook script. > Let=E2=80=99s see if we can bring more knowledgeable people on board=E2= =80=A6 Yes please! :) -- Ricardo