NAME

lfacme-ualpn — validate an ACME challenge via TLS using ualpn

SYNOPSIS

In domains.conf(5):

DESCRIPTION

The lfacme-ualpn challenge hook will respond to an ACME domain validation using a TLS-based “tls-alpn-01” authorization. To use this challenge hook, configure one or more domains with “challenge=ualpn” in domains.conf(5).

The “tls-alpn-01” challenge expects the authorization token to be provided in response to a TLS connection to port 443 on the domain to be valided. This functionality is provided by the ualpn(1) daemon, which is part of uacme. The ualpn(1) daemon must be configured and running for this challenge handler to work.

CONFIGURATION

The lfacme-ualpn challenge hook supports the following configuration options in acme.conf(5):

LFACME_UALPN

Path to the ualpn(1) program. If not specified, $PATH will be searched.

SEE ALSO

acme.conf(5), domains.conf(5), lfacme-renew(8), ualpn(1)