Let's Encrypt - TLS-SNI-01 issue

Discussion in 'ISPConfig 3 Priority Support' started by SupuS, Jan 11, 2018.

  1. SupuS

    SupuS Member HowtoForge Supporter

  2. till

    till Super Moderator Staff Member ISPConfig Developer

    ISPConfig uses webroot authentication and not tls-sni-01 authentication, so the creation of SSL certs in ISPConfig is not affected in my opinion. If someone may use an ISPConfig server to get an SSL cert with tls-sni-01 is something different: with domain limit module enabled, it should not be possible as far as I see. Without domain module on, it might be possible. As a general precaution, I will add a filter that denies domains that end with 'acme.invalid' in ISPConfig.
    SupuS likes this.

Share This Page