Mon 25 Dec 2023

  • Added Let’s Encrypt Nameserver Daemon (lend) and client (lenc) to eon, which provisions TLS certs with the ACME DNS challenge inside the nameserver modifying the trie directly.
    • Required porting ocaml/letsencrypt to Eio 0.12.
  • Added a Capnp RPC interface to provision certificates using this creating Let’s Encrypt Nameserver Cap’n Proto (lenscap). There’s still work to do including supporting renewals with capnp callbacks which will probably require sturdy refs, the story for which persisting seems complicated.
  • Read RFC9518 on the train up to Scotland.