ACME IP address or domain
-
Hi all. Can you please tell me how to find out the list of all IP addresses and/or domains that ACME uses when it generates Let's Encrypt certificates? This is due to the fact that I use geopolitics for the HTTP protocol only for my country. And I would not like to open HTTP to the whole world, but only to those IP addresses and/or domains that are needed for ACME to work.
-
@aes4096 can you not just use dns method - then you don't have to open up anything.
Not sure if they have a list, their DC sure - but pretty sure it does a check from multiple locations, etc.
Here they say they don't publish it
https://letsencrypt.org/docs/faq/#what-ip-addresses-does-let-s-encrypt-use-to-validate-my-web-server
What IP addresses does Let’s Encrypt use to validate my web server?
We don’t publish a list of IP addresses we use to validate, and these IP addresses may change at any time. Note that we now validate from multiple IP addresses.https://letsencrypt.org/2020/02/19/multi-perspective-validation
-
@johnpoz Yes, you are right. I can use the DNS method or purchase a Wildcard certificate with subdomain protection, which is more expensive.
-
@aes4096 said in ACME IP address or domain:
I can use the DNS method or purchase a Wildcard certificate with subdomain protection, which is more expensive.
If you can use a DNS Method you can ask a wildcard certificate.
Letsencrypt will still be free of use.If you own( = rent) a domain name, you control the domain. You are the only one being able to create sub domains.
I can proof that : try creating aes4096.microsoft.com : good luck ^^
