As part of cert-manager, we perform SOA record lookups when 'presenting' DNS01 challenges in order to determine which DNS zone should be searched for when solving a challenge.
With challtestsrv, this is obviously not necessary, however in order to make testing my own application easier it would be really helpful if challtestsrv could support SOA record lookups.
This would allow me to run tests whereby cert-manager is pointed at challtestsrv to solve & to 'self check' challenges, before allowing Pebble to check the authorization.
On the other hand, if we aren't doing the expected/sensible thing here then please let me know so I can make appropriate changes in our own implementation!
For what it's worth, we also perform NS lookups in order to find the authority for the zone, so that we can query the authoritative nameservers. This behaviour can be toggled in our client however, so NS record support is not a blocker for us utilising challtestsrv 😄
/cc @cpu
As part of cert-manager, we perform SOA record lookups when 'presenting' DNS01 challenges in order to determine which DNS zone should be searched for when solving a challenge.
With challtestsrv, this is obviously not necessary, however in order to make testing my own application easier it would be really helpful if challtestsrv could support SOA record lookups.
This would allow me to run tests whereby cert-manager is pointed at challtestsrv to solve & to 'self check' challenges, before allowing Pebble to check the authorization.
On the other hand, if we aren't doing the expected/sensible thing here then please let me know so I can make appropriate changes in our own implementation!
For what it's worth, we also perform NS lookups in order to find the authority for the zone, so that we can query the authoritative nameservers. This behaviour can be toggled in our client however, so NS record support is not a blocker for us utilising challtestsrv 😄
/cc @cpu