mirrors/caddy-website
1
0
Fork 0
mirror of https://github.com/caddyserver/website.git synced 2025-04-20 12:15:08 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge 5c827fd448 into e9db589e6b

Browse source
This commit is contained in:
Kekalainen 2024-10-28 16:13:58 -04:00 • committed by GitHub
commit 0e4ca74d04
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 17 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

25
src/docs/markdown/caddyfile/directives/tls.md
View file

@ -353,22 +353,31 @@ Obtains certificates using the ACME protocol. Note that `acme` is a default issu
- **any_common_name** <span id="any_common_name"/> is a list of one or more common names; Caddy will choose the first chain that has an issuer that matches with at least one of the specified common names. - **any_common_name** <span id="any_common_name"/> is a list of one or more common names; Caddy will choose the first chain that has an issuer that matches with at least one of the specified common names.
<aside class="tip">
The `acme` issuer module will implicitly use [ZeroSSL's ACME endpoint](https://zerossl.com/documentation/acme/) (and generate EAB credentials) if you specify the the [`email` global option](/docs/caddyfile/options#email).
To provide your own EAB credentials for ZeroSSL, specify the `dir` and `eab` options.
</aside>
#### zerossl #### zerossl
Obtains certificates using the ACME protocol, specifically with ZeroSSL. Note that `zerossl` is a default issuer, so configuring it explicitly is usually unnecessary. Obtains certificates using the [ZeroSSL API](https://zerossl.com/documentation/api/).
```caddy-d ```caddy-d
... zerossl [<api_key>] { ... zerossl <api_key> {
... validity_days <days>
alt_http_port <port>
dns <provider_name> [<options>]
propagation_delay <duration>
propagation_timeout <duration>
resolvers <dns_servers...>
dns_ttl <duration>
} }
``` ```
The syntax for `zerossl` is exactly the same as for [`acme`](#acme), except that its name is `zerossl` and it can optionally take your ZeroSSL API key. Fields for the `zerossl` issuer module share the syntax of those in common with the [`acme` issuer module](#acme).
Its functionality is also the same, except that it will use ZeroSSL's directory by default and it can automatically negotiate EAB credentials (whereas with the `acme` issuer, you have to manually provide EAB credentials and set the directory endpoint).
When explicitly configuring `zerossl`, configuring an `email` is required so that your certificates can appear in your ZeroSSL dashboard.
#### internal #### internal