SSL certificate cannot be uploaded via API

[olivaw448]

I using traefik with ACME to get certificate for https.
But it's would be greater possibility to upload certificate and private key via DNS Server API. (in docker network)
Traefik will automatically send new cert, if it was updated.

What problem this solves: automatically updating the certificate if it's updated on traefik.

[ShreyasZare]

Thanks for the request. Is it not feasible for you to directly update the certificate file on disk? With docker, you will have the config folder mounted on host file system. Just trying to understand if any such option is possible for your setup.

[olivaw448]

Is it not feasible for you to directly update the certificate file on disk?

acme.json in traefik with permission 600 which cannot be changed. (created by traefik by default)
DNS server doesn't have root permission to read it.

[ShreyasZare]

Thanks for the feedback. Will see how this can be implemented.

[ShreyasZare]

Just to understand the scenario better: are you looking to update the cert for the admin web service or for the encrypted DNS protocols? Also, since you already have a reverse proxy, you can just do TLS termination at the proxy itself, so updating the certs at DNS server wont be required for such a setup.