{"added":null,"apiVersion":1,"behindSince":null,"buildDepends":[],"categories":["wip","security"],"comment":"Simplified DNS server to automate ACME DNS challenges","compare":"/compare/acme-dns/index.json","dependentCount":null,"description":"A simplified DNS server with a RESTful HTTP API to provide a simple\nway to automate ACME DNS challenges.\n\nMany DNS servers do not provide an API to enable automation for the\nACME DNS challenges. Those which do, give the keys way too much power.\nLeaving the keys laying around your random boxes is too often a\nrequirement to have a meaningful process automation.\n\nAcme-dns provides a simple API exclusively for TXT record updates and\nshould be used with ACME magic \"\\_acme-challenge\" - subdomain CNAME\nrecords. This way, in the unfortunate exposure of API keys, the\neffects are limited to the subdomain TXT record in question.\n\nSo basically it boils down to **accessibility** and **security**.\n\nFor longer explanation of the underlying issue and other proposed\nsolutions, see a blog post on the topic from EFF deeplinks blog:\nhttps://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation","flavors":[],"html":"https://daemonports.org/netbsd/wip/acme-dns/","kind":"port","lastUpdate":null,"license":["mit"],"maintainer":"pkgsrc-users@NetBSD.org","name":"acme-dns","newest":true,"newestVersion":"1.0","noVulnData":false,"origin":"wip/acme-dns","otherSystems":[{"maintainer":"mops@punkt.de","matchedBy":"name","newest":true,"origin":"dns/acme-dns","path":"/dns/acme-dns/","system":"FreeBSD","updated":"2026-10-20","version":"1.0_43,1"},{"maintainer":"mops@punkt.de","matchedBy":"name","newest":true,"origin":"dns/acme-dns","path":"/dragonfly/dns/acme-dns/","system":"DragonFly","version":"1.0_20,1"},{"maintainer":"ports@MidnightBSD.org","matchedBy":"name","newest":true,"noVulnData":true,"origin":"dns/acme-dns","path":"/midnightbsd/dns/acme-dns/","system":"MidnightBSD","version":"1.0,1"},{"maintainer":"mops@punkt.de","matchedBy":"name","newest":true,"noVulnData":true,"origin":"dns/acme-dns","path":"","system":"HardenedBSD","version":"1.0_41,1"},{"maintainer":"mops@punkt.de","matchedBy":"name","newest":true,"noVulnData":true,"origin":"dns/acme-dns","path":"","system":"GhostBSD","version":"1.0_41,1"}],"packages":null,"pkgName":"acme-dns-1.0","related":null,"repository":"pkgsrc-wip","requiredBy":[],"requiredByCount":0,"runDepends":[],"status":null,"system":"netbsd","systemLabel":"NetBSD","version":"1.0","versions":null,"vulnerabilities":null,"www":"https://github.com/joohoi/acme-dns/"}