keyvault-acmebot CNAME Support

CNAME Support

Open MattiasAng opened this issue 3 years ago • 11 comments

Is your feature request related to a problem? Please describe. I work with many different clients which use different DNS providers than those supported here. One easy workaround is to use CNAME aliases to redirect to a subdomain and delegate the subdomain to Azure DNS.

More information here: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation

Describe the solution you'd like Possible solution here could be to add a 'Delegated zone' checkbox which changes 'DNS Zone' field to 'Delegated DNS Zone' and 'DNS Names' field changes to allow the zonename to be edited. When API request is sent it will send both: record.delegated.example.tld (delegated record to create) record.example.tld (certificate to request)

Describe alternatives you've considered Alternative is creating a own solution or moving zones to supported provider.

Sep 11 '20 11:09 MattiasAng

I will consider implementing it, but it is a low priority.

Sep 13 '20 16:09 shibayan

I would also benefit from this. I rely on sjkp/letsencrypt-siteextension version for external clients.

Sep 17 '20 07:09 Marcel0024

Now that I have a better understanding of CNAME support, I will start to consider supporting it when I have more time.

Oct 05 '21 18:10 shibayan

I would also like to +1 this feature, here is a good explanation of the potential benefits:

https://poshac.me/docs/v4/Guides/Using-DNS-Challenge-Aliases/

Feb 22 '22 10:02 Philo

I would also like to see this feature. My organization is unable to move to a currently supported DNS provider and being able to simply redirect from a supported DNS to our own would be an ideal solution.