Stefan Eissing

Could you given an example, like with `example.com` what exactly you are trying to do?

If you do not use virtual hosts, you might need to configure `MDBaseServer`, see https://github.com/icing/mod_md#mdbaseserver Usually, mod_md does not mess with the base server configuration, only the virtual hosts. That...

Thanks for the details. This seems to indicate that Let's Encrypt is not happy with the TXTs it sees. `AUTHZ state 3` means that the challenge for FQDN was not...

Maybe the order of challenge setup and verification is different with acme.sh. As you see in the logs, mod_md does the setup for all domains and then monitors the status...

I had an issue raised about mod_md handling domains longer than 63 octets. I no longer populate the CN in the CSR for such domains and leave it up to...

Sorry about coming back to this late. I do not fully understand when you say "mod_md is requesting the TXT record once". Is this some confusion with DNS caching behaviour...

Thanks for getting this to work and getting in touch. I do not have a cloud fronting myself, so it is always good to get feedback. I think I'll point...

Hmm, just setup a domain and got a certificate successfully: ``` [Mon Oct 04 12:29:03.780581 2021] [md:trace2] [pid 2009937:tid 140299590395648] md_crypt.c(1395): read chain with 2 certs [Mon Oct 04 12:29:03.780591...

urgs. But they seem to have a test API endoint: https://api.test4.buypass.no/acme/directory

A minimal test setup, I used here: ``` MDDriveMode always MDCertificateAuthority https://api.test4.buypass.no/acme/directory ``` that will trigger a renewal, even though that domain is not visible in any VirtualHosts. Hope this...