GitLab

Let's Encrypt disabled the TLS-SNI challenge, which is the basis of the autocert package that meek-server uses for automatic TLS certificates:

• tls-sni challenge disabled I've informed the public meek-server operators about this and asked that they be ready with manual certificates in the short term.

The autocert package recently added support for the HTTP-01 challenge. It requires the server to listen on port 80.

Further reading:

• 2018.01.09 Issue with TLS-SNI-01 and Shared Hosting Infrastructure
• 2018.01.11 Update Regarding ACME TLS-SNI and Shared Hosting Infrastructure
• TLS-SNI challenges disabled for most new issuance
• https://twitter.com/bradfitz/status/951909513593958400

  Use the #golang autocert package? You need to update your code due to @LetsEncrypt changes. You need to use this now: https://godoc.org/golang.org/x/crypto/acme/autocert#Manager.HTTPHandler See the example: https://godoc.org/golang.org/x/crypto/acme/autocert#example-Manager Everybody's sorry. Tears all around. 😢

• x/crypto/acme/autocert: Support http-01 challenge (GitHub #21890)
• acme/autocert: support http-01 challenge type