holulu

AI 生成再快，在严肃场景里还是得人来确认吧，不然上线出问题还是得自己担。如果不是严肃场景就随便吧。

不联网就用不了的电视都不考虑

这个月到第五档了。

服务器不影应 TLS-ALPN-01 ，只返回 HTTP-01 的 challenge 就是外行？？？你那么内行为啥还要问这个问题？显得自己很内行？

ACME HTTP-01 if server redirect to 443
Thinking
Searching
Yes,
ACME HTTP-01 challenges support redirects from port 80 to port 443 (HTTPS). This is a standard practice that allows you to maintain a secure-by-default configuration while still automating certificate renewals.
Key Rules for Redirects

Initial Request: The validation server (e.g., Let's Encrypt) must always start its request on port 80 using HTTP. You cannot skip port 80 and start on 443 for an HTTP-01 challenge.
Supported Ports: The challenge follows redirects only to port 80 or 443. Redirecting to a custom port like 8443 or 10000 will cause the challenge to fail.
Redirect Depth: Most ACME implementations, including Let’s Encrypt, will follow up to 10 redirects deep.
Certificate Validation: When the challenge is redirected to HTTPS (port 443), the CA does not validate the target's SSL certificate. This allows the challenge to succeed even if your current certificate is expired, self-signed, or missing.

@jianglibo 不是这样是怎么样？麻烦回一下？如果你的服务器在访问 80 时重定向到 443 ，ACEM 应该怎么反应？

@jianglibo acme 只会访问 80 端口，如果你的服务器跳转 443 ，acme 应该会 follow ，并且忽略证书验证，只检查 http body 里的 challenge token

http 服务器在 http://<YOUR_DOMAIN>/.well-known/acme-challenge 路径返回 challenge token 。

上年 11 月中开始满街都能看到移动 29 元 200G+100 分钟，上个月去搞了一张。昨天看到广告还在。