ACME client

ACME client An architecture diagram generated by Archify. ACME client · (Certbot, Caddy, lego) wants a fresh certific… · Architecture component ACME client (Certbot, Caddy, lego) wants a fresh certific… Sends a certificate request · to the CA over ACME · Architecture component Sends a certificate request to the CA over ACME CA replies: · prove you control this domain · Architecture component CA replies: prove you control this domain HTTP-01 · client drops a token at http://<domain>/.well… · Architecture component HTTP-01 client drops a token at http://<domain>/.well… CA fetches that URL · over plain HTTP · Architecture component CA fetches that URL over plain HTTP Token matches the one · the CA expected · Architecture component Token matches the one the CA expected DNS-01 · client writes a TXT record _acme-challenge.<d… · Architecture component DNS-01 client writes a TXT record _acme-challenge.<d… CA queries DNS and · reads the TXT value · Architecture component CA queries DNS and reads the TXT value Token matches - works even · for wildcard domains · Architecture component Token matches - works even for wildcard domains Domain proved · CA signs the new short-lived cert (which just… · Architecture component Domain proved CA signs the new short-lived cert (which just… Legend Backend Cloud Security External

Source summary

  • • 10 of 10 nodes shown
  • • 10 links preserved in the original
  • • ACME client
  • • Sends a certificate request