ACME protocol support

[malthe]

Adding built-in ACME protocol support would alleviate the need for a separate process to keep certificates updated.

References:

• https://github.com/caddyserver/ingress#automatic-https
• https://letsencrypt.org/docs/challenge-types/

[daimg]

Thanks for your attention on this project, we will add it into TODO list.
Because some tool, such as cert-manager, could perform such functionality automatically, it would have low priority.

[malthe]

@daimg note that the TLS-ALPN-01 challenge must be supported directly by the ingress controller because it works directly on the TLS layer.

[daimg]

yes, cert-manager doesn't support TLS-ALPN-01 yet, while challenges DNS-01 and HTTP-01 have to be used.
TLS-ALPN-01 requires more special logic in TLS handshake for this new APLN defined in spec, we may need some enhancement in BFE eventually, which actually process TLS handshake.