From 99151a2db842a850a2860af3e77532370802ca69 Mon Sep 17 00:00:00 2001 From: Lexi Winter Date: Tue, 3 Jun 2025 10:49:05 +0100 Subject: make the challenge handler configurable perhaps one day we'll even support something other than Kerberos! --- domains.conf.sample | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'domains.conf.sample') diff --git a/domains.conf.sample b/domains.conf.sample index 6dace98..41de581 100644 --- a/domains.conf.sample +++ b/domains.conf.sample @@ -31,6 +31,16 @@ # If begins with a '/' then it is an absolute path, # otherwise it is relative to $ACME_HOOKDIR. # This option may be given multiple times. +# +# challenge= +# Use as the challenge handler. If begins +# with '/' then it is an absolute path, otherwise it will +# be searched for in /usr/local/share/lfacme/challenge/ +# then /usr/local/etc/lfacme/challenge/. +# +# One challenge script is supplied with lfacme, "kerberos", +# which uses Kerberized nsupdate(1) to respond to dns-01 +# challenges. # A certificate name of "*" can be used to set the default options for any # following certificates. For example, to use RSA (instead of the default -- cgit v1.2.3