mirror of
https://github.com/rkivalin/certforge.git
synced 2026-10-13 16:00:44 +00:00
Breaking config change. The DNS and challenge configuration is now structured around named, reusable components: - [dns.*] named DNS client connections with explicit zone field - [solver.*] challenge solvers (dns-01, http-01, tls-alpn-01) - Certificates reference solvers by name (solver/solvers fields) - DANE blocks reference DNS clients by name (dns field) - Removed automatic zone detection heuristics - Added default_solver for global fallback - Validation: DNS-01 rejected for IP addresses, solver/solvers mutual exclusivity, length matching, reference integrity HTTP-01 and TLS-ALPN-01 solver implementations to follow. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>