NAME

lfacme-http — validate an ACME challenge via HTTP

SYNOPSIS

In domains.conf(5):

DESCRIPTION

The lfacme-http challenge hook will respond to an ACME domain validation using an HTTP-based “http-01” authorization. To use this challenge hook, configure one or more domains with “challenge=http” in domains.conf(5).

The “http-01” challenge expects the authorization token to be served via HTTP at the path “/.well-known/acme-challenge/token” on the domain to be validated. When lfacme-http responds to the challenge, it will place the token in the directory configured by LFACME_HTTP_CHALLENGE_DIR in acme.conf(5). This directory must be mapped to the appropriate path on the web server for the challenge to succeed.

CONFIGURATION

The lfacme-http challenge hook supports the following configuration options in acme.conf(5):

LFACME_HTTP_CHALLENGE_DIR

(Required.) The directory to place the challenge tokens in. The contents of this directory should be served at the path “/.well-known/acme-challenge” on the web server for the domain to be validated.

SEE ALSO

acme.conf(5), domains.conf(5), lfacme-renew(8)