Skip to content

Conversation

@JensSpanier
Copy link
Contributor

@JensSpanier JensSpanier commented Jul 10, 2025

In preparation for the upcoming support of IP address certificates at Letsencrypt, I have added the option to select certificate profiles.

So if you want to issue an IP address certificate, this is the command for Letsencrypt (staging):
acme.sh --issue -d 203.0.113.195 -w /home/username/public_html --server letsencrypt_test --certificate-profile shortlived --days 6

Closes #6193

@trieloff
Copy link

thank you, this looks interesting. I hope the maintainers will get around to a review.

@szhu25
Copy link
Contributor

szhu25 commented Jul 14, 2025

Great work on this!
To make it even more robust, what if we first adjusted the logic to dynamically pull the ACME profile from the CA's directory before making the request? This aligns with their best practices for clients.
Then, as a fallback, we could also add the specific error handling for the invalidProfile ACME error. This would create a very resilient implementation.
Implementing this would also close #6193.

CC: @Neilpang

@Neilpang
Copy link
Member

@Neilpang
Copy link
Member

please add a new page in the wiki:
https://github.com/acmesh-official/acme.sh/wiki

@Neilpang Neilpang merged commit 493ec4b into acmesh-official:dev Sep 27, 2025
29 of 31 checks passed
@Neilpang
Copy link
Member

Neilpang commented Sep 27, 2025

I'm thinking we needa new command: acme.sh --list-profiles [--server letsencrypt] to get and list the current supported profiles from the CA.

It could just get from the webside, can show output like:


name           info 
classic          https://letsencrypt.org/docs/profiles#classic
shortlived    https://letsencrypt.org/docs/profiles#shortlived (not yet generally available)
tlsserver      https://letsencrypt.org/docs/profiles#tlsserver

Would you mind adding it?

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants