Posh-ACME.net46
4.35.0
ACME protocol client for obtaining certificates using Let''s Encrypt (or other ACME compliant CA)
This is a custom build intended allow compatibility with .NET 4.6.1. It should not be used with PowerShell Core and you should only attempt to use RSA based key options.
Minimum PowerShell version
5.1
Installation Options
Owners
Copyright
(c) 2018 Ryan Bolger. All rights reserved.
Package Details
Author(s)
- Ryan Bolger
Tags
LetsEncrypt ssl tls certificates acme
Functions
Complete-PAOrder Export-PAAccountKey Get-DnsPersistAccountUri Get-DnsAcctLabel Get-KeyAuthorization Get-PAAccount Get-PAAuthorization Get-PACertificate Get-PAOrder Get-PAPlugin Get-PAPluginArgs Get-PAProfile Get-PAServer Get-PublishedPersistChallenge Install-PACertificate Invoke-HttpChallengeListener New-PAAccount New-PACertificate New-PAOrder New-PAAuthorization Publish-Challenge Publish-DnsPersistChallenge Remove-PAAccount Remove-PAOrder Remove-PAServer Revoke-PAAuthorization Revoke-PACertificate Save-Challenge Send-ChallengeAck Set-PAAccount Set-PAOrder Set-PAServer Submit-ChallengeValidation Submit-OrderFinalize Submit-Renewal Unpublish-Challenge Unpublish-DnsPersistChallenge
PSEditions
Dependencies
This module has no dependencies.
Release Notes
## 4.35.0 (2026-10-11)
* Posh-ACME now fully supports the new `dns-persist-01` challenge type based on [draft-ietf-acme-dns-persist-02](https://datatracker.ietf.org/doc/draft-ietf-acme-dns-persist/). The module still works with draft 01 based ACME servers, but the `_validation-persist` records must already exist or you must use the Advanced parameter set from `Publish-DnsPersistChallenge` to publish draft 01 compatible records. There are no available draft 02 ACME CAs to test against yet, so testing has been largely theoretical and bugs may surface once there is something real to test against.
* *Breaking Change:* `-UseAllDomains` has been removed from (Un)Publish-DnsPersistChallenge and they no longer attempt to skip records that would be covered by another wildcard record.
* *Breaking Change:* The FromOrder parameter set on (Un)Publish-DnsPersistChallenge should still work the same way, but it will now only work against draft 02+ compatible ACME servers.
* *Breaking Change:* Wildcard FQDNs passed to (Un)Publish-DnsPersistChallenge will now automatically have `policy=wildcard` added to that specific record without needing to pass the `-AllowWildcard` switch. Using the switch still adds it to all records being processed.
* *Breaking Change:* The Standalone parameter set on (Un)Publish-DnsPersistChallenge has been replaced by 3 new parameter sets. See the function docs and persist guide for details.
* 3 new parameter sets for (Un)Publish-DnsPersistChallenge that allow for more pre-provisioning use cases, some of which don't require publishing from the same system you request the certs from. See the function docs and persist guide for details.
* New `Get-DnsPersistAccountUri` function which calculates the hashed accountUri field required in draft 02 compatible persistent records.
* New `Get-PublishedPersistChallenge` function which returns the details of persistent records published from the current Posh-ACME config. The objects returned by this function can be piped to (Un)Publish-DnsPersistChallenge.
* `Get-PAAccount` now returns two additional fields
* `pubkey` which is a public-only version of the existing ACME account `key` value
* `thumbprint` which is the JWK thumbprint value of the ACME account key
* The default display output for a PAAccount object now includes the thumbprint by default
* `dns-persist-01` has been added to the allowed values for `-DnsVariant` on New-PACertificate, New-PAOrder, and Set-PAOrder.
* The `-DnsVariant` parameter on the older (Un)Publish-Challenge functions only allows `dns-01` and `dns-account-01`.
* No user-facing changes to `Submit-ChallengeValidation`, but lots of refactoring internally to support the various dns-persist-01 workflows.
* New "shared" PluginArgs parameter, `PublishPersist`, which must be `$true` if you want a dns-persist-01 enabled order to automatically attempt to re-publish the necessary persistent records on each renewal. This shouldn't be necessary when using pre-provisioning.
* Added "DNS Challenge Variants" guide
* Added "Using Persistent DNS Challenges" guide
* New [DNSMint](https://dnsmint.com/) plugin (#690) (Thanks @kxbnb)
* Fixed orders using `-CSRPath` throwing an error with CSRs that have the SAN field marked as critical. (#692) (Thanks @nimbice)
* Fixed parsing of RSA private keys that contained leading zeroes in some fields. (#694) (Thanks @nimbice)
* Fixed an internal typo related to HurricaneElectricDyn plugin name affecting output of `Get-PAPlugin` and some verbose logging (#695) (Thanks @nimbice)
* Fixed some dead or redirecting links in the readme (#696) (Thanks @mikeweinberg)
* Fixed `-CSRPath` workflows ignoring IP SAN fields in the parsed CSR. (#699)
* Fixed `Set-PAOrder` skipping the cert re-export when `-Profile` is also changed (#698) (Thanks @nimbice)
* Fixed ARI check using previous order's window when a request fails (#697) (Thanks @nimbice)
* Fixed `Complete-PAOrder` using the current order instead of a specified order for cert detail output and installation. (#700) (Thanks @nimbice)
* Fixed orders using `-OCSPMustStaple` failing to generate a CSR. (#701) (Thanks @nimbice)
* Fixed `Get-PAAccount` and `Test-ValidPlugin` edge case bugs. (#702) (Thanks @nimbice)
* Fixed a bug when using `Set-PAAccount` with both `-NewName` and `-NoSwitch`. (#703) (Thanks @nimbice)
FileList
- Posh-ACME.net46.nuspec
- Posh-ACME.Format.ps1xml
- Posh-ACME.net46.psd1
- Posh-ACME.psm1
- en-US\about_Posh-ACME.help.txt
- en-US\Posh-ACME-help.xml
- lib\BC.Crypto.1.8.8.dll
- lib\license.txt
- Plugins\AcmeDns.ps1
- Plugins\Active24.ps1
- Plugins\AddrTools.ps1
- Plugins\Akamai.ps1
- Plugins\Aliyun.ps1
- Plugins\All-Inkl.ps1
- Plugins\Aurora.ps1
- Plugins\AutoDNS.ps1
- Plugins\Azure.ps1
- Plugins\Beget.ps1
- Plugins\BlueCat.ps1
- Plugins\Bunny.ps1
- Plugins\Cloudflare.ps1
- Plugins\ClouDNS.ps1
- Plugins\Combell.ps1
- Plugins\Constellix.ps1
- Plugins\CoreNetworks.ps1
- Plugins\DeSEC.ps1
- Plugins\DMEasy.ps1
- Plugins\DNSExit.ps1
- Plugins\DNSimple.ps1
- Plugins\DNSMint.ps1
- Plugins\DNSPod.ps1
- Plugins\DOcean.ps1
- Plugins\DomainOffensive.ps1
- Plugins\Domeneshop.ps1
- Plugins\Dreamhost.ps1
- Plugins\DuckDNS.ps1
- Plugins\Dynu.ps1
- Plugins\EasyDNS.ps1
- Plugins\Easyname.ps1
- Plugins\EuroDNSReseller.ps1
- Plugins\FreeDNS.ps1
- Plugins\Gandi.ps1
- Plugins\GCloud.ps1
- Plugins\GoDaddy.ps1
- Plugins\GoDaddyV3.ps1
- Plugins\GoogleDomains.ps1
- Plugins\Hetzner.ps1
- Plugins\HetznerCloud.ps1
- Plugins\HostingDe.ps1
- Plugins\HostingNL.ps1
- Plugins\HostUp.ps1
- Plugins\HurricaneElectric.ps1
- Plugins\HurricaneElectricDyn.ps1
- Plugins\IBMSoftLayer.ps1
- Plugins\Infoblox.ps1
- Plugins\Infomaniak.ps1
- Plugins\InfomaniakV2.ps1
- Plugins\INWX.ps1
- Plugins\IONOS.ps1
- Plugins\ISPConfig.ps1
- Plugins\LeaseWeb.ps1
- Plugins\Linode.ps1
- Plugins\Loopia.ps1
- Plugins\LuaDns.ps1
- Plugins\Manual.ps1
- Plugins\MijnHost.ps1
- Plugins\Namecheap.ps1
- Plugins\NameCom.ps1
- Plugins\NameSilo.ps1
- Plugins\Netcup.ps1
- Plugins\NS1.ps1
- Plugins\OnlineNet.ps1
- Plugins\OVH.ps1
- Plugins\PointDNS.ps1
- Plugins\Porkbun.ps1
- Plugins\PortsManagement.ps1
- Plugins\PowerDNS.ps1
- Plugins\Rackspace.ps1
- Plugins\Regru.ps1
- Plugins\RFC2136.ps1
- Plugins\Route53.ps1
- Plugins\Selectel.ps1
- Plugins\SimpleDNSPlus.ps1
- Plugins\Simply.ps1
- Plugins\SimplyCom.ps1
- Plugins\SOLIDServer.ps1
- Plugins\Spaceship.ps1
- Plugins\SSHProxy.ps1
- Plugins\Technitium.ps1
- Plugins\TencentDNS.ps1
- Plugins\TotalUptime.ps1
- Plugins\TransIP.ps1
- Plugins\UKFast.ps1
- Plugins\WebRoot.ps1
- Plugins\WebSelfHost.ps1
- Plugins\WebsupportSK.ps1
- Plugins\WEDOS.ps1
- Plugins\Windows.ps1
- Plugins\Yandex.ps1
- Plugins\Zilore.ps1
- Plugins\ZoneEdit.ps1
- Plugins\Zonomi.ps1
- Plugins\_Example-DNS.ps1
- Plugins\_Example-HTTP.ps1
- Private\AcmeException.ps1
- Private\ConvertFrom-Base64Url.ps1
- Private\ConvertFrom-BCKey.ps1
- Private\ConvertFrom-Jwk.ps1
- Private\ConvertTo-Base64Url.ps1
- Private\ConvertTo-Jwk.ps1
- Private\ConvertTo-PAAuthorization.ps1
- Private\Export-CertPfx.ps1
- Private\Export-PACertFiles.ps1
- Private\Export-Pem.ps1
- Private\Export-PluginArgs.ps1
- Private\Export-PluginVar.ps1
- Private\Get-AlternateLinks.ps1
- Private\Get-ChainIssuers.ps1
- Private\Get-CsrDetails.ps1
- Private\Get-EncryptionParam.ps1
- Private\Get-IssuerFromChallenge.ps1
- Private\Get-Nonce.ps1
- Private\Import-PAConfig.ps1
- Private\Import-Pem.ps1
- Private\Import-PfxCertInternal.ps1
- Private\Import-PluginDetail.ps1
- Private\Import-PluginVar.ps1
- Private\Import-WindowsChain.ps1
- Private\InitTLS.ps1
- Private\Invoke-ACME.ps1
- Private\MockWrappers.ps1
- Private\New-AesKey.ps1
- Private\New-Csr.ps1
- Private\New-Jws.ps1
- Private\New-PAKey.ps1
- Private\Register-ArgCompleters.ps1
- Private\Repair-ISODate.ps1
- Private\Set-AltPluginEncryption.ps1
- Private\Split-PemChain.ps1
- Private\Start-SleepProgress.ps1
- Private\Test-SecureStringNotNullOrEmpty.ps1
- Private\Test-ValidDirUrl.ps1
- Private\Test-ValidFriendlyName.ps1
- Private\Test-ValidKey.ps1
- Private\Test-ValidKeyLength.ps1
- Private\Test-ValidPlugin.ps1
- Private\Test-WinOnly.ps1
- Private\Update-PAAccount.ps1
- Private\Update-PAOrder.ps1
- Private\Update-PluginEncryption.ps1
- Private\Wait-AuthValidation.ps1
- Public\Complete-PAOrder.ps1
- Public\Export-PAAccountKey.ps1
- Public\Get-DnsAcctLabel.ps1
- Public\Get-DnsPersistAccountUri.ps1
- Public\Get-KeyAuthorization.ps1
- Public\Get-PAAccount.ps1
- Public\Get-PAAuthorization.ps1
- Public\Get-PACertificate.ps1
- Public\Get-PAOrder.ps1
- Public\Get-PAPlugin.ps1
- Public\Get-PAPluginArgs.ps1
- Public\Get-PAProfile.ps1
- Public\Get-PAServer.ps1
- Public\Get-PublishedPersistChallenge.ps1
- Public\Install-PACertificate.ps1
- Public\Invoke-HttpChallengeListener.ps1
- Public\New-PAAccount.ps1
- Public\New-PAAuthorization.ps1
- Public\New-PACertificate.ps1
- Public\New-PAOrder.ps1
- Public\Publish-Challenge.ps1
- Public\Publish-DnsPersistChallenge.ps1
- Public\Remove-PAAccount.ps1
- Public\Remove-PAOrder.ps1
- Public\Remove-PAServer.ps1
- Public\Revoke-PAAuthorization.ps1
- Public\Revoke-PACertificate.ps1
- Public\Save-Challenge.ps1
- Public\Send-ChallengeAck.ps1
- Public\Set-PAAccount.ps1
- Public\Set-PAOrder.ps1
- Public\Set-PAServer.ps1
- Public\Submit-ChallengeValidation.ps1
- Public\Submit-OrderFinalize.ps1
- Public\Submit-Renewal.ps1
- Public\Unpublish-Challenge.ps1
- Public\Unpublish-DnsPersistChallenge.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 4.35.0 (current version) | 4 | 10/12/2026 |
| 4.34.0 | 55 | 8/23/2026 |
| 4.33.1 | 52 | 6/16/2026 |
| 4.33.0 | 17 | 6/10/2026 |
| 4.32.0 | 23 | 4/1/2026 |
| 4.31.1 | 31 | 2/7/2026 |
| 4.31.0 | 10 | 1/21/2026 |
| 4.30.1 | 16 | 11/18/2025 |
| 4.30.0 | 10 | 11/14/2025 |
| 4.29.3 | 27 | 7/24/2025 |
| 4.29.2 | 13 | 7/15/2025 |
| 4.29.1 | 13 | 6/26/2025 |
| 4.29.0 | 9 | 6/26/2025 |
| 4.28.0 | 24 | 2/9/2025 |
| 4.27.0 | 20 | 1/8/2025 |
| 4.26.0 | 19 | 11/2/2024 |
| 4.25.1 | 26 | 9/3/2024 |
| 4.25.0 | 12 | 8/18/2024 |
| 4.24.0 | 13 | 6/19/2024 |
| 4.23.1 | 13 | 5/23/2024 |
| 4.23.0 | 11 | 5/4/2024 |
| 4.22.0 | 12 | 4/13/2024 |
| 4.21.0 | 20 | 3/8/2024 |
| 4.20.0 | 33 | 12/13/2023 |
| 4.19.0 | 20 | 8/26/2023 |
| 4.18.0 | 16 | 6/28/2023 |
| 4.17.1 | 26 | 3/29/2023 |
| 4.17.0 | 23 | 2/21/2023 |
| 4.16.0 | 26 | 11/23/2022 |
| 4.15.1 | 30 | 9/9/2022 |
| 4.15.0 | 19 | 8/27/2022 |
| 4.14.0 | 59 | 4/13/2022 |
| 4.13.1 | 28 | 3/14/2022 |
| 4.13.0 | 29 | 3/7/2022 |
| 4.12.0 | 79 | 1/14/2022 |
| 4.11.0 | 60 | 11/24/2021 |
| 4.10.0 | 50 | 10/6/2021 |
| 4.9.0 | 42 | 9/21/2021 |
| 4.8.1 | 28 | 9/12/2021 |
| 4.8.0 | 23 | 9/10/2021 |
| 4.7.1 | 31 | 8/28/2021 |
| 4.7.0 | 26 | 8/24/2021 |
| 4.6.0 | 57 | 7/26/2021 |
| 4.5.0 | 39 | 5/29/2021 |
| 4.4.0 | 37 | 5/3/2021 |
| 4.3.2 | 37 | 3/14/2021 |
| 4.3.1 | 22 | 3/12/2021 |
| 4.3.0 | 30 | 2/24/2021 |
| 4.2.0 | 35 | 2/1/2021 |
| 4.1.0 | 33 | 1/18/2021 |
| 4.0.0 | 32 | 12/19/2020 |
| 3.20.0 | 35 | 11/25/2020 |
| 3.19.0 | 30 | 11/20/2020 |
| 3.18.1 | 27 | 11/12/2020 |
| 3.18.0 | 23 | 11/8/2020 |
| 3.17.0 | 26 | 10/9/2020 |
| 3.16.1 | 28 | 9/1/2020 |
| 3.15.1 | 46 | 7/8/2020 |
| 3.15.0 | 32 | 6/23/2020 |
| 3.14.0 | 42 | 5/7/2020 |
| 3.13.0 | 75 | 4/11/2020 |
| 3.12.0 | 114 | 12/10/2019 |
| 3.11.0 | 52 | 11/12/2019 |
| 3.10.0 | 30 | 11/6/2019 |
| 3.9.0 | 35 | 10/26/2019 |
| 3.8.0 | 41 | 9/27/2019 |
| 3.7.0 | 30 | 9/18/2019 |
| 3.6.0 | 49 | 8/20/2019 |
| 3.5.0 | 4,145 | 6/21/2019 |
| 3.4.0 | 58 | 4/30/2019 |
| 3.3.0 | 36 | 3/24/2019 |
| 3.2.1 | 42 | 3/4/2019 |
| 3.2.0 | 43 | 1/22/2019 |
| 3.1.1 | 1,009 | 12/22/2018 |
| 3.1.0 | 26 | 12/16/2018 |
| 3.0.1 | 51 | 11/30/2018 |
| 3.0.0 | 53 | 11/13/2018 |
| 2.9.1 | 29 | 10/26/2018 |
| 2.9.0 | 32 | 10/6/2018 |
| 2.8.0 | 175 | 9/12/2018 |
| 2.7.1 | 26 | 8/30/2018 |
| 2.7.0 | 34 | 8/12/2018 |
| 2.6.0 | 25 | 8/1/2018 |
| 2.5.0 | 50 | 7/13/2018 |