Skip to content

TLS certificates page: Settings tab with ACME challenge type selection #8099

Description

@DavidePrincipi

The TLS certificates page currently has an ACME servers view where each node can be configured with a custom ACME server URL. The UI does not expose the ACME challenge type, which the backend supports; administrators who need TLS-ALPN-01 (e.g. when port 80 is unavailable or filtered) must configure it outside the UI. The page navigation and table layout also need a refresh for consistency and readability.

Proposed solution

Implement the Figma mockups from design issue #7973.

Image

Recap for the UI development:

  • Replace the current navigation button with two tabs: Certificates and ACME settings
  • Restructure the settings table with columns in this order: Node, ACME directory URL, Challenge type (this also fixes the current wrong column order, node must come first)
  • Add UI support for selecting the ACME challenge type: HTTP-01 or TLS-ALPN-01
  • Update the edit modal: add the Challenge type selection, improve terminology and labels, align naming with the new Settings section

Settings are per node, as in the current ACME servers view.

Alternative solutions

None: the design was discussed and agreed in #7973 and the linked Mattermost threads.

Additional context

  • DNS-01 challenge type is intentionally out of scope for this iteration; it will be added later, when backend support and the additional configuration fields it requires are available. The challenge type selector should be easy to extend with a third option.
  • Trusted proxy settings (trusted proxy IPv4/v6 addresses + trust depth) are not part of this issue: they will be exposed under the HTTP routes page and tracked separately. Mockups for that section are still in progress.

See also

Metadata

Metadata

Assignees

Labels

UXUser experience issues

Fields

No fields configured for Feature.

Projects

Status
ToDo

Relationships

None yet

Development

No branches or pull requests

Issue actions