auto-ssl / auto-ssl/lua-resty-auto-ssl
Checking DNS records before issuing a certificate
- Dominant language
- Lua
- Stars
- 2k
- Forks
- 184
- PR merge metrics
- No merged PRs in 30d
Description
First thanks for the great work in building this 👍
It would be great if auto-ssl would check that the DNS would resolve to a certain set of IPs before issuing a request to LetsEncrypt.
For example a new auto_ssl:set function could return that list of IPs, and if DNS resolves to any of those the certificate request goes ahead.
Contributor guide
No contributing guide indexed for this repository
Research direction
No file or test is named in the issue. Start by locating the auto_ssl:set entry point and the Let's Encrypt request path, then determine how the proposed IP list and DNS check fit into certificate issuance. Done means requests proceed only when DNS resolves to an allowed IP, with the behavior verified by relevant project tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- lua, nginx
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100