{"action":"created","issue":{"url":"https://api.github.com/repos/certbot/certbot/issues/2861","repository_url":"https://api.github.com/repos/certbot/certbot","labels_url":"https://api.github.com/repos/certbot/certbot/issues/2861/labels{/name}","comments_url":"https://api.github.com/repos/certbot/certbot/issues/2861/comments","events_url":"https://api.github.com/repos/certbot/certbot/issues/2861/events","html_url":"https://github.com/certbot/certbot/issues/2861","id":149061443,"number":2861,"title":"Allow webroot to use the TLS SNI challenge","user":{"login":"iangelov","id":1127871,"avatar_url":"https://avatars.githubusercontent.com/u/1127871?v=3","gravatar_id":"","url":"https://api.github.com/users/iangelov","html_url":"https://github.com/iangelov","followers_url":"https://api.github.com/users/iangelov/followers","following_url":"https://api.github.com/users/iangelov/following{/other_user}","gists_url":"https://api.github.com/users/iangelov/gists{/gist_id}","starred_url":"https://api.github.com/users/iangelov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iangelov/subscriptions","organizations_url":"https://api.github.com/users/iangelov/orgs","repos_url":"https://api.github.com/users/iangelov/repos","events_url":"https://api.github.com/users/iangelov/events{/privacy}","received_events_url":"https://api.github.com/users/iangelov/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/certbot/certbot/labels/webroot","name":"webroot","color":"d4c5f9"},{"url":"https://api.github.com/repos/certbot/certbot/labels/wontfix","name":"wontfix","color":"ffffff"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-04-18T07:00:31Z","updated_at":"2016-08-01T07:53:47Z","closed_at":"2016-06-21T00:08:21Z","body":"Hi guys - excellent work, thank you for that.\r\n\r\nAs usual there's are some minor rough edges - in this case, for me, that's the fact that the webroot plugin doesn't work with the TLS challenge - which is a bit annoying, since I don't have port 80 open and thus I can't properly automate certificate renewal.\r\n\r\nSince renewal takes place before the certificate has expired, I think it makes sense to allow the webroot-powered renewal process to work with the TLS challenge - no need to add plugins for that particular type of web server/reverse proxy/load balancer, only a specific path would be used for this as opposed to a whole port (the standalone plugin). Makes it easy to work around limitations that different environments have - in my case, for example, I've haproxy fronting nginx."},"comment":{"url":"https://api.github.com/repos/certbot/certbot/issues/comments/236512844","html_url":"https://github.com/certbot/certbot/issues/2861#issuecomment-236512844","issue_url":"https://api.github.com/repos/certbot/certbot/issues/2861","id":236512844,"user":{"login":"stylersnico","id":7188611,"avatar_url":"https://avatars.githubusercontent.com/u/7188611?v=3","gravatar_id":"","url":"https://api.github.com/users/stylersnico","html_url":"https://github.com/stylersnico","followers_url":"https://api.github.com/users/stylersnico/followers","following_url":"https://api.github.com/users/stylersnico/following{/other_user}","gists_url":"https://api.github.com/users/stylersnico/gists{/gist_id}","starred_url":"https://api.github.com/users/stylersnico/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stylersnico/subscriptions","organizations_url":"https://api.github.com/users/stylersnico/orgs","repos_url":"https://api.github.com/users/stylersnico/repos","events_url":"https://api.github.com/users/stylersnico/events{/privacy}","received_events_url":"https://api.github.com/users/stylersnico/received_events","type":"User","site_admin":false},"created_at":"2016-08-01T07:53:47Z","updated_at":"2016-08-01T07:53:47Z","body":"Hi @bmw,\r\n\r\nI have the same problem but port 80 is open, I simply redirect everything to HTTPS with that configuration in NGINX:\r\n\r\n```nginx\r\n        if ($scheme != \"https\") {\r\n            rewrite ^ https://$http_host$request_uri? permanent;\r\n        }\r\n```\r\n\r\nAnd webroot simply fails at renewal. \r\nIt's a real problem because Certbot isn't compatible with NGINX and webroot is the only way to get ECDSA certificates.\r\n\r\nAny workaround?\r\n\r\nI don't want to modify dozens of vhost every time I need to renews certs.\r\n\r\nThanks"}}
{"actor":{"display_login":"stylersnico"}}