Allow ACME to request non-ejabberd hosted subdomains
@zinid is already working on this.
Since Oct 30, 2019.
Assessment
This issue has not been assessed yet.
Description
The current implementation just uses ACME to get certs for: domain.tld, upload.domain.tld, conference.domain.tld, proxy.domain.tld, pubsubdomain.tld which, I guess, are extracted from the currently hosted ones by ejabberd.
ejabberd, at least in my case, is not just a single daemon for everything on this domain, I might have others too in need of certs, like web.domain.tld (hosting Converse.js on nginx) or anything else really.
So I am forced to add some other ACME tool to generate some certs that might not share the same domain key, so basically different certs with different SANs and expiration dates, on the same base domain.
Now, I do see the point of keeping it strictly related to ejabberd, but the whole thing is rather odd:
- If I use dehydrated for
web.domain.tldwhy should I bother with the included ACME? I can use this for the ejabberd domains too, right? - If ejabberd is getting certs for its hosted domains only, why does it generate a cert for
upload.domain.tldeven if that is NOT hosted by itself (put_urlpoints to a nginx instance, and withexternal_secretvia ngx_http_upload) ? nginx should now use one cert forupload.and another forweb.
Maybe add an option additional_domains: where the admin can, besides whatever ejabberd is setup, add other domains.
Right now this feels artificially limited for some reason.
- Dominant language
- Erlang
- Stars
- 6.7k
- Forks
- 1.6k
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from processone/ejabberd
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
processone/ejabberd#4597 ·
-
API permissions Open
processone/ejabberd#4619 · 3 comments · 1 assignee ·
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
processone/ejabberd#4616 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
processone/ejabberd#4614 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
processone/ejabberd#4613 · 1 comment ·