Is letsencrypt direct supported now?

I know, but it doesn't change the fact that you could let us do the challenge by DNS using a manual txt record or by automating it with an api key from one of the bigger dns providers (if the domain is hosted by them)

i automated it with a cronjob script on a linux box, it uses the api of cloudflare, maybe wanna have a look as a temporary solution? ill pm you details if wanted.

I have the exact same setup :) I'm just wondering why they can't give us more options when others can

Hi Kenneth,

You might check in Ideas to see if there's already such a suggestion or make one there and then come back here and share a link to it.  Griping here is a waste of energy.

Cheers - Bob

I've already voted!

Link is: http://ideas.sophos.com/forums/17359-utm-feature-requests/suggestions/10409280-let-s-encrypt-integration

Thanks for the suggestion Bob. 

this is how Lets Encrypt got integrated with opnsense:

You can use DNS and not have it have control of DNS.  It just takes a few extra steps on the end user.  I have several servers that I have to do this with and all I have to do is add the required update to my DNS server and wait a few minutes for it to populate.  Once that is done, I am able to have the certificates issued.  This might be one way to implement it for all areas of the UTM.

This is just my 2 cents.

Thanks,

Eddie

During the registration with Lets Encrypt, you have to prove you own the domain in question by placing a special file in a specific (externally-visible) location. The challenge is, if you're not using WAF, how will the UTM automatically expose this file externally to complete the Lets Encrypt registration?

I think you misunderstood what is meant by "domain" for LetsEncrypt, you do not have to prove for the root domain, you need to prove for each sub domain (also known as a host), so using LetsEncrypt for utm.domain.com does not require access to wherever the "naked" domain domain.com is served.