What's New
HTTP-01 Challenge Support
CertMate now supports HTTP-01 ACME challenges as an alternative to DNS-01, enabling certificate issuance for users without DNS API access.
- No DNS credentials needed — CertMate serves challenge files directly via
/.well-known/acme-challenge/<token> - Uses certbot
--webrootplugin — challenge files written todata/acme-challenges/ - Settings & dashboard UI — select challenge type per-certificate or set a global default
- Wildcard validation — HTTP-01 does not support wildcard certificates; clear error messages guide users to DNS-01
How it works
- Set challenge type to HTTP-01 in Settings → DNS Providers tab
- Ensure your domain points to the CertMate server (reverse proxy forwards
/.well-known/acme-challenge/to CertMate) - Create a certificate — no DNS provider or account needed
Files changed
app.py, modules/api/resources.py, modules/core/certificates.py, modules/core/dns_strategies.py, modules/core/settings.py, modules/web/routes.py, static/js/dashboard.js, static/js/settings.js, templates/index.html, templates/settings.html
Full Changelog: v1.10.3...v1.10.4