GFI Forums: Kerio Connect Feedback » Let's Encrypt Challenge Method DNS Option

Home » Product Feedback » Kerio Connect Feedback » Let's Encrypt Challenge Method DNS Option (Let's Encrypt Challenge Method DNS Option)

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Let's Encrypt Challenge Method DNS Option [message #152715]

Tue, 20 September 2022 17:49

cmharley
Messages: 4
Registered: September 2022

It would be great is we could use an alternate challenge method for the Let's Encrypt interface. There are companies out there that do not feel comfortable opening up web access to their on-prem email server for the HTTP challenge. Also, for those that would be willing to open firewall access to a whitelist IP, the option is not available because Let's Encrypt will not publish an IP list for several reasons, one is the secure nature of their issuing process. The DNS TXT record option would be a good one to explore as an alternative.

Report message to a moderator

Re: Let's Encrypt Challenge Method DNS Option [message #152716 is a reply to message #152715]

Wed, 21 September 2022 06:48

mzaidi
Messages: 113
Registered: April 2021

Thank you for the feedback, we've shared your request with the backend Team for further review.

Report message to a moderator

Re: Let's Encrypt Challenge Method DNS Option [message #152775 is a reply to message #152716]

Thu, 29 September 2022 15:42

Razvan Soranescu
Messages: 17
Registered: September 2021

Hi cmharley,

Port 80 requirement is due to the Let's Encrypt process. https://letsencrypt.org/docs/allow-port-80/ suggests keeping port 80 open but redirected to HTTPS.
You should not have issues when renewing with a redirected port 80 to 443. But, there are rare situations where the port cannot be opened, even for a redirect.

Per the topic's subject, I understand that you would like KerioConnect to include the DNS-01 and/or TLS-ALPN-01 challenge alongside the current HTTP-01 challenge.
We've logged the request under GFIPEF-80.

GFI Customer Support Edge Team

Report message to a moderator

Re: Let's Encrypt Challenge Method DNS Option [message #152776 is a reply to message #152775]

Thu, 29 September 2022 17:35

cmharley
Messages: 4
Registered: September 2022

Thank you for the consideration.

Report message to a moderator

Previous Topic:	Enhance EWS support (for EM Client, Mailbird and others...)
Next Topic:	Zoom Integration with Kerio Connect

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sun May 28 13:58:49 CEST 2023

Total time taken to generate the page: 0.05312 seconds