Skip to content
This repository was archived by the owner on May 26, 2026. It is now read-only.

Add Support For Let's Encrypt Enrollment When Terminating TLS#23

Open
SelfDrivingCarp wants to merge 3 commits into
inconshreveable:masterfrom
SelfDrivingCarp:lets-encrypt-upstream-22
Open

Add Support For Let's Encrypt Enrollment When Terminating TLS#23
SelfDrivingCarp wants to merge 3 commits into
inconshreveable:masterfrom
SelfDrivingCarp:lets-encrypt-upstream-22

Conversation

@SelfDrivingCarp
Copy link
Copy Markdown

This PR is regarding #22.

  • Adds a config option to Frontend called LetsEncryptPath (lets_encrypt_path in yaml).
  • If tls_cert or tls_key are set this functionality is disabled.
  • When tls_cert and tls_key are unset and this config option is set to a directory path slt will request a cert as needed from Let's Encrypt for the specified SNI name.
  • Enrollment doesn't happen until the first request.
  • The cert and key are cached in lets_encrypt_path.
  • Multiple front ends can safely use the same lets_encrypt_path.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant