Arbitrary CA Servers

[LuvForAirplanes]

While I realize that the project was named LettuceEncrypt, which directly implies it is for use with Let's Encrypt, I would like to consider adding support for arbitrary CA servers. My goals for this are primarily in a development environment, but it may be useful in production also. (say, for an internal SSL network where we have a local CA authority)

This idea has been mentioned before: (Issue #50 Comment 629898104)

So my point is, it would be nice to be able to fetch and use the latest cert from an arbitrary ACME CA or from a given http API endpoint...

What do ya'll think?

[gcelet]

Hi all,

I use step-ca to manage my internal certificates: supporting arbitrary ACME CA would be super useful for me.

[LuvForAirplanes]

That's precisely what I'm using also.

[natemcmaster]

This should be possible already. Try providing your own implementation of ICertificateAuthorityConfiguration via DI.
https://github.com/natemcmaster/LettuceEncrypt/blob/v1.0.1/src/LettuceEncrypt/Acme/ICertificateAuthorityConfiguration.cs

[LuvForAirplanes]

Thanks @natemcmaster I'll check into this. I had already implemented it a little differently, but I'll see if I can get my code modified.

[natemcmaster]

Closing as question is answered and this feature is already implemented.