mikeblum / acme-api-gateway Goto Github PK

API Gateway only supports certificates that have a key size of 2048; whereas by default, dehydrated ses KEYSIZE=4096. That means that by default, the certificate won't work and will generate an error when it's added to API Gateway.

The solution is to simply enter KEYSIZE=2048 in a config file for dehydrated

I'm not sure if this hook can change that, because it's with dehydrated. But it would be good if it can display a warning to the user if the keysize of the certificate is wrong...

Hi

This works great!

It would be even better if we didn't need to enter AWS_SECRET_ACCESS_KEY etc. as environment variables.

These can be obtained automatically by the aws cli. As an example, if I use the Route53 ruby hook from here:

https://github.com/lukas2511/dehydrated/wiki/Examples-for-DNS-01-hooks

... Then I don't need to enter AWS credentials, since they're automatically pulled from the EC2 instance. It would be great if this can use the same system...

Thanks!

Tom