Why a half ACME client?

Posted Aug 15, 2025 15:13 UTC (Fri) by farnz (subscriber, #17727)
In reply to: Why a half ACME client? by ttuttle
Parent article: NGINX adds native support for ACME protocol

Both CA and user decide what challenge to use; the CA offers support for various challenge types (with differing certificate issuance rules for each type - for example, a wildcard cert from LetsEncrypt needs a DNS challenge), the user selects one to use.