LettuceEncrypt
LettuceEncrypt copied to clipboard
natemcmaster
Added X1 Root certificate
Added X1 Root certificate to tackle the issue mentioned in https://github.com/natemcmaster/LettuceEncrypt/issues/229
Hey there, thanks for proposing a change. I don't know enough about this issue, nor do I see evidence of enough validation and testing to accept this change. As an alternative solution to #229, I would be okay if we could add some kind of extensibility point into the library so you can manipulate the certificate in your own applications. This would be preferable to making a change in this library code for now. I haven't run into the issues you are seeing with SSL certs, but if it is a problem in Certes itself, I would rather have Certes issue an update than accept this workaround.
Hey there, thanks for proposing a change. I don't know enough about this issue, nor do I see evidence of enough validation and testing to accept this change. As an alternative solution to #229, I would be okay if we could add some kind of extensibility point into the library so you can manipulate the certificate in your own applications. This would be preferable to making a change in this library code for now. I haven't run into the issues you are seeing with SSL certs, but if it is a problem in Certes itself, I would rather have Certes issue an update than accept this workaround.
Check the certificates at any SSL checker, such as https://www.sslshopper.com/ssl-checker.html
I created https://github.com/MarkCiliaVincenti/TlsCertificateLoader to deal with these issues and I think you could easily change LettuceEncrypt to make use of this package.
I wasn't able to get Let's Encrypt staging certificate without X1. Prod worked fine.
