Validation plugins

A validation plugin is responsible for providing the ACME server with proof that you own the identifiers (host names) that you want to create a certificate for. The ACMEv2 protocol defines different challenge types, three of which are supported by simple-acme, namely HTTP-01, DNS-01 and TLS-ALPN-01.

For wildcard identifiers, only DNS-01 validation is accepted by Let’s Encrypt.

Several other challenge types are not supported for various reasons:

  • TLS-SNI-01/-02 - deprecated and removed
  • PROOFOFPOSSESSION-01 - unknown

Settings

Validation.DefaultValidation Default validation plugin.

Type: string
Default: undefined (equivalent to "selfhosting", with "filesystem" as backup for unprivileged users.)
Validation.DefaultValidationMode Default validation method.

Type: string
Default: undefined (equivalent to "http-01")

Looking for win-acme?

simple-acme is a backwards compatible, drop-in replacement built by the same person. Project history.