Hey there,
Sometimes Let’s Encrypt appears to randomly switch between its intermediate certs (R10, R11).
Unfortunately, this breaks my TLSA records in the DNS.
Since Let’s Encrypt does not support the selection of the intermediate cert, I see only one possible solutions:
Use a post-renewal hook to automatically update the TLSA record. However, I haven’t found any hooks exposed.
Do I need to modify the Dockerfile
to introduce the hook into acme.sh
myself or is there another way?
Are there other possible solutions for the problem?
Thanks,
neodym