Can we have an option to not do domain validation? about terraform-provider-acme

[vancluever]

Hey @kingcdavid do you have examples of this? I've never heard of an ACME CA not requiring validation, and I'd be concerned about how removal would affect the UX of the tool.

Or have a 'dummy' provider which doesn't try to validate the domain?

This would probably be the approach we'd want to take so that it's explicit and ensures that a challenge is still entered.

Thanks!

[kingcdavid]

Hi @vancluever

So, I've actually found an alternative route, so it's not critical at all

The ACME CA is able to use a previous validation of the domains, so it's not so much it doesn't require validation, but they could already be validated, either by a different ACME client or by other means

I actually just used the http_webroot_challenge method, and then the ACME CA is able to detect the domain is already validated

Please feel free to close the issue though

Thanks!

[vancluever]

@kingcdavid glad it worked out! We can definitely keep this issue for reference in case it becomes more of a use case. Cheers!

[on4tux]

@vancluever can you reopen this request? We internally use Sectigo via ACME and can skip the challenge. Our current workaround is to use "exec" which runs a simple shell script with "exit 0". Ideally the dns_challenge should indeed have another option "none" to make it permanent.

[vancluever]

@on4tux sure. Not too sure when I'll get to it, but I'm happy to have a PR if you want to see it sooner rather than later!