cert-manager 与 ACME 协议
尝试了解 cert-manager 与 ACME 协议有何不同,因为两者都执行相同的操作。 cert-manager 使用 ACME 协议吗?
我们在 GoDaddy 中拥有域 DNS,在 Oracle Cloud OCI 和证书管理器中拥有 Kubernetes 集群,并且我们使用集群颁发者(让我们加密为 CA)。
据我所知,GoDaddy 不支持 acme 协议,那么 HTTP-01 验证是如何发生的。
Trying to understand how cert-manager is different from the ACME protocol since both do the same thing. Does cert-manager use the ACME protocol?
We have our domain DNS in GoDaddy, a Kubernetes cluster in Oracle Cloud OCI and cert-manager and we use a cluster issuer (let's encrypt is the CA).
As far as I know, GoDaddy doesn't support acme protocol then how is HTTP-01 validation happening.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
我想您指的是 cert-manager,它是用于处理 TLS 证书的 Kubernetes 运算符。 cert-manager 实现 RFC 8555 中定义的 ACME 客户端协议。
至于GoDaddy对ACME协议的支持,我想您指的是https://letsencrypt.org/文档/godaddy/:
据我了解,您在 GoDaddy 上注册了域名,并且您的域名区域托管在 GoDaddy 的 DNS 服务中。由于您没有使用 GoDaddy 的共享虚拟主机,因此在使用 GoDaddy 的共享虚拟主机时,您不会受到缺乏 ACME 支持的影响。您可以安全地使用 cert-manager 的 HTTP-01 或 DNS-01 ACME 求解器。
I suppose you are referring to cert-manager, the Kubernetes operator for dealing with TLS certificates. cert-manager implements the ACME client protocol defined in the RFC 8555.
As for the support of the ACME protocol by GoDaddy, I suppose you are referring to https://letsencrypt.org/docs/godaddy/:
As I understand it, you registered your domain on GoDaddy, and your domain zone is hosted in GoDaddy's DNS service. Since you are not using GoDaddy's shared web hosting, you are not affected by the lack of ACME support when using GoDaddy's shared web hosting. You can safely use cert-manager's HTTP-01 or DNS-01 ACME solvers.