# Support for DNS-01 Challenge Provider for cert-manager (LetsEncrypt)

**URL:** <https://community.convox.com/t/support-for-dns-01-challenge-provider-for-cert-manager-letsencrypt/902>\
**Category:** Feature Requests\
**Created:** [November 8, 2022, 3:25am UTC](https://community.convox.com/t/support-for-dns-01-challenge-provider-for-cert-manager-letsencrypt/902 "2022-11-08T03:25:25Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![nathan.f77](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.convox.com/nathan.f77/32/256_2.png) [@nathan.f77](https://community.convox.com/u/nathan.f77)\
**Post date:** [November 8, 2022, 3:25am UTC](https://community.convox.com/t/support-for-dns-01-challenge-provider-for-cert-manager-letsencrypt/902/1 "2022-11-08T03:25:25Z")

</div>

This is something that I have always needed during major Convox migrations. The DNS provider allows LetsEncrypt to issue new SSL certs by validating a DNS record instead of making an HTTP request. This means that I can get the new servers ready to accept requests before switching over the DNS records, so that there is zero downtime.

I wrote about this here as well: [Zero downtime SSL migration from v2 to v3 rack - #2 by nathan.f77](https://community.convox.com/t/zero-downtime-ssl-migration-from-v2-to-v3-rack/831/2)

Support for the Cloudflare integration would be very helpful, since this is how I use the DNS challenges for cert-manager: [Cloudflare - cert-manager Documentation](https://cert-manager.io/docs/configuration/acme/dns01/cloudflare/)

This would also be very helpful for blue/green deployments: [Blue/green deployments for safe Convox release updates](https://community.convox.com/t/blue-green-deployments-for-safe-convox-release-updates/901)  
(Unless there is an easy way to export the SSL certs and import them into a new EKS cluster?)