opnsense / opnsense/plugins

security/acme-client: Support for DNS-PERSIST-01 challenge

Open
#5,242 2 comments 2 reactions 1 assignee View on GitHub

@fraenki is already working on this.

Since Feb 21, 2026.

feature
Dominant language
PHP
Stars
1.2k
Forks
863
Avg merge
2d 6h
Merged PRs (30d)
10

Description

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.

Let's Encrypt are implementing a persistent version of the DNS-01 challenge that removes the need for updating DNS every certificate issuance.

Describe the solution you'd like

acme-client supports no-credentials certificate issuance via DNS-PERSIST-01 challenge

Describe alternatives you've considered

Continue to use credentials-based DNS-01 challenge.

Additional context

Likely comes from upstream but worth having a tracking issue

https://letsencrypt.org/2026/02/18/dns-persist-01.html

acmesh-official/acme.sh/issues/6766

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.