Skip to content

Conversation

JensSpanier
Copy link

@JensSpanier JensSpanier commented Jul 10, 2025

In preparation for the upcoming support of IP address certificates at Letsencrypt, I have added the option to select certificate profiles.

So if you want to issue an IP address certificate, this is the command for Letsencrypt (staging):
acme.sh --issue -d 203.0.113.195 -w /home/username/public_html --server letsencrypt_test --certificate-profile shortlived --days 6

Closes #6193

@trieloff
Copy link

thank you, this looks interesting. I hope the maintainers will get around to a review.

@szhu25
Copy link
Contributor

szhu25 commented Jul 14, 2025

Great work on this!
To make it even more robust, what if we first adjusted the logic to dynamically pull the ACME profile from the CA's directory before making the request? This aligns with their best practices for clients.
Then, as a fallback, we could also add the specific error handling for the invalidProfile ACME error. This would create a very resilient implementation.
Implementing this would also close #6193.

CC: @Neilpang

@@ -7689,6 +7702,10 @@ _process() {
_valid_to="$2"
shift
;;
--certificate-profile)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please give it another short name, eg:

--certificate-profile | --profile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants