package letsencrypt-dns

  1. Overview
  2. Docs
Legend:
Library
Module
Module type
Parameter
Class
Class type
val dns_solver : ([ `raw ] Domain_name.t -> string -> (unit, [ `Msg of string ]) result Lwt.t) -> Letsencrypt.Client.solver

dns_solver (fun domain content) is a solver for dns-01 challenges. The provided function should return Ok () once the authoritative name servers serve a TXT record at domain with the content. The domain already has the _acme-challenge. prepended.

print_dns outputs the DNS challenge solution, and waits for user input before continuing with ACME.

val nsupdate : ?proto:Dns.proto -> int -> (unit -> Ptime.t) -> (Cstruct.t -> (unit, [ `Msg of string ]) result Lwt.t) -> ?recv:(unit -> (Cstruct.t, [ `Msg of string ]) result Lwt.t) -> zone:[ `host ] Domain_name.t -> keyname:'a Domain_name.t -> Dns.Dnskey.t -> Letsencrypt.Client.solver

nsupdate ~proto id now send ~recv ~keyname key ~zone constructs a dns solver that sends a DNS update packet (using send) and optionally waits for a signed reply (using recv if present) to solve challenges. The update is signed with a hmac transaction signature (DNS TSIG) using now () as timestamp, and the keyname and key for the cryptographic material. The zone is the one to be used in the query section of the update packet. If signing, sending, or receiving fails, the error is reported.

OCaml

Innovation. Community. Security.