Module ssl 

The background worker that obtains certificates for verified domains.

Issuance is not a request. An ACME order involves several round trips to the CA, a challenge the CA has to fetch back over the network, and rate limits that make retrying-with-backoff the only sane failure mode. None of that fits inside an HTTP handler: a thirty-second order would hold the request open, and a client timeout would abandon an order the CA had already started.

So the API only ever sets state. Verifying a domain with ssl_provider = 'acme' leaves it pending; this worker drains pending, and POST /domains/{id}/ssl/retry puts a failed one back.

That is also why there is no POST /domains/{id}/ssl/provision. An older version of docs/saas-domains.md documented one, and it was never in the router.

Functions

run

Run until cancelled.