Feature Request: Support ACME Profiles

[szhu25]

Could acme.sh consider supporting ACME profiles?
Currently the profile is only available on Let's Encrypt's staging endpoint and still a draft on IETF, but it's nice if acme.sh would be able to support this feature when/if the draft would made it to published.
https://letsencrypt.org/2025/01/09/acme-profiles/

[Neilpang]

yes, we will support it.

[jlecour]

Hi.
It seems that profiles will be used to issue "6-day" certificates, which makes its support even more appealing.

Thanks a lot for the wonderful work on acme.sh ❤

[ghen2]

Let's Encrypt profiles are live now: https://community.letsencrypt.org/t/tlsserver-profile-in-prod/236701

This quick 'n dirty test gave me a certificate with tlsserver profile:

--- acme.sh.orig        2025-01-16 22:25:02.000000000 +0100
+++ acme.sh     2025-04-24 22:38:05.917954681 +0200
@@ -4576,6 +4576,7 @@
     _debug2 _identifiers "$_identifiers"
     _notBefore=""
     _notAfter=""
+    _profile="tlsserver"
 
     if [ "$_valid_from" ]; then
       _savedomainconf "Le_Valid_From" "$_valid_from"
@@ -4613,6 +4614,9 @@
     if [ "$_notAfter" ]; then
       _newOrderObj="$_newOrderObj,\"notAfter\": \"$_notAfter\""
     fi
+    if [ "$_profile" ]; then
+      _newOrderObj="$_newOrderObj,\"profile\": \"$_profile\""
+    fi
     _debug "STEP 1, Ordering a Certificate"
     if ! _send_signed_request "$ACME_NEW_ORDER" "$_newOrderObj}"; then
       _err "Error creating new order."