mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-05-06 07:03:28 +02:00
renamed project to dehydrated and main script to dehydrated.sh
This commit is contained in:
@@ -19,4 +19,4 @@ Or when you do have a DNS API, pass the details accordingly to achieve the same
|
||||
|
||||
You can delete the TXT record when called with operation clean_challenge, when $2 is also the domain name.
|
||||
|
||||
Here are some examples: [Examples for DNS-01 hooks](https://github.com/lukas2511/letsencrypt.sh/wiki/Examples-for-DNS-01-hooks)
|
||||
Here are some examples: [Examples for DNS-01 hooks](https://github.com/lukas2511/dehydrated/wiki/Examples-for-DNS-01-hooks)
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
### domains.txt
|
||||
|
||||
letsencrypt.sh uses the file `domains.txt` as configuration for which certificates should be requested.
|
||||
dehydrated.sh uses the file `domains.txt` as configuration for which certificates should be requested.
|
||||
|
||||
The file should have the following format:
|
||||
|
||||
|
||||
@@ -1,10 +1,10 @@
|
||||
########################################################
|
||||
# This is the main config file for letsencrypt.sh #
|
||||
# This is the main config file for dehydrated.sh #
|
||||
# #
|
||||
# This file is looked for in the following locations: #
|
||||
# $SCRIPTDIR/config (next to this script) #
|
||||
# /usr/local/etc/letsencrypt.sh/config #
|
||||
# /etc/letsencrypt.sh/config #
|
||||
# /usr/local/etc/dehydrated/config #
|
||||
# /etc/dehydrated/config #
|
||||
# ${PWD}/config (in current working-directory) #
|
||||
# #
|
||||
# Default values of this config are in comments #
|
||||
@@ -42,8 +42,8 @@
|
||||
# Directory for account keys and registration information
|
||||
#ACCOUNTDIR="${BASEDIR}/accounts"
|
||||
|
||||
# Output directory for challenge-tokens to be served by webserver or deployed in HOOK (default: /var/www/letsencrypt)
|
||||
#WELLKNOWN="/var/www/letsencrypt"
|
||||
# Output directory for challenge-tokens to be served by webserver or deployed in HOOK (default: /var/www/dehydrated)
|
||||
#WELLKNOWN="/var/www/dehydrated"
|
||||
|
||||
# Default keysize for private keys (default: 4096)
|
||||
#KEYSIZE="4096"
|
||||
|
||||
@@ -9,7 +9,7 @@ See below for an example on how the calls change:
|
||||
|
||||
### HOOK_CHAIN="no" (default behaviour)
|
||||
```
|
||||
# INFO: Using main config file /etc/letsencrypt.sh/config
|
||||
# INFO: Using main config file /etc/dehydrated/config
|
||||
Processing lukas.im with alternative names: www.lukas.im
|
||||
+ Checking domain name(s) of existing cert... unchanged.
|
||||
+ Checking expire date of existing cert...
|
||||
@@ -31,13 +31,13 @@ HOOK: clean_challenge www.lukas.im blublublu blublublu.supersecure
|
||||
+ Checking certificate...
|
||||
+ Done!
|
||||
+ Creating fullchain.pem...
|
||||
HOOK: deploy_cert lukas.im /etc/letsencrypt.sh/certs/lukas.im/privkey.pem /etc/letsencrypt.sh/certs/lukas.im/cert.pem /etc/letsencrypt.sh/certs/lukas.im/fullchain.pem /etc/letsencrypt.sh/certs/lukas.im/chain.pem 1460152442
|
||||
HOOK: deploy_cert lukas.im /etc/dehydrated/certs/lukas.im/privkey.pem /etc/dehydrated/certs/lukas.im/cert.pem /etc/dehydrated/certs/lukas.im/fullchain.pem /etc/dehydrated/certs/lukas.im/chain.pem 1460152442
|
||||
+ Done!
|
||||
```
|
||||
|
||||
### HOOK_CHAIN="yes"
|
||||
```
|
||||
# INFO: Using main config file /etc/letsencrypt.sh/config
|
||||
# INFO: Using main config file /etc/dehydrated/config
|
||||
Processing lukas.im with alternative names: www.lukas.im
|
||||
+ Checking domain name(s) of existing cert... unchanged.
|
||||
+ Checking expire date of existing cert...
|
||||
@@ -57,7 +57,7 @@ HOOK: clean_challenge lukas.im blablabla blablabla.supersecure www.lukas.im blub
|
||||
+ Checking certificate...
|
||||
+ Done!
|
||||
+ Creating fullchain.pem...
|
||||
HOOK: deploy_cert lukas.im /etc/letsencrypt.sh/certs/lukas.im/privkey.pem /etc/letsencrypt.sh/certs/lukas.im/cert.pem /etc/letsencrypt.sh/certs/lukas.im/fullchain.pem /etc/letsencrypt.sh/certs/lukas.im/chain.pem 1460152408
|
||||
HOOK: deploy_cert lukas.im /etc/dehydrated/certs/lukas.im/privkey.pem /etc/dehydrated/certs/lukas.im/cert.pem /etc/dehydrated/certs/lukas.im/fullchain.pem /etc/dehydrated/certs/lukas.im/chain.pem 1460152408
|
||||
+ Done!
|
||||
```
|
||||
|
||||
|
||||
@@ -1,3 +1,3 @@
|
||||
# Import
|
||||
|
||||
If you want to import existing keys from the official letsencrypt client have a look at [Import from official letsencrypt client](https://github.com/lukas2511/letsencrypt.sh/wiki/Import-from-official-letsencrypt-client).
|
||||
If you want to import existing keys from the official letsencrypt client have a look at [Import from official letsencrypt client](https://github.com/lukas2511/dehydrated/wiki/Import-from-official-letsencrypt-client).
|
||||
|
||||
BIN
docs/logo.jpg
Normal file
BIN
docs/logo.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 46 KiB |
@@ -1,6 +1,6 @@
|
||||
# Config on per-certificate base
|
||||
|
||||
letsencrypt.sh allows a few configuration variables to be set on a per-certificate base.
|
||||
dehydrated.sh allows a few configuration variables to be set on a per-certificate base.
|
||||
|
||||
To use this feature create a `config` file in the certificates output directory (e.g. `certs/example.org/config`).
|
||||
|
||||
|
||||
@@ -6,7 +6,7 @@ Generally if the following information doesn't provide a solution to your proble
|
||||
|
||||
You probably changed from staging-CA to production-CA (or the other way).
|
||||
|
||||
Currently letsencrypt.sh doesn't detect a missing registration on the selected CA,
|
||||
Currently dehydrated.sh doesn't detect a missing registration on the selected CA,
|
||||
the current workaround is to move `private_key.pem` (and, if you care, `private_key.json`) out of the way so the scripts generates and registers a new one.
|
||||
|
||||
This will hopefully be fixed in the future.
|
||||
@@ -19,13 +19,13 @@ LICENSE1 and LICENSE2 are just placeholders for the real values in this troubles
|
||||
|
||||
## "Error creating new cert :: Too many certificates already issued for: [...]"
|
||||
|
||||
This is not an issue with letsencrypt.sh but an API limit with letsencrypt.
|
||||
This is not an issue with dehydrated.sh but an API limit with boulder (the ACME server).
|
||||
|
||||
At the time of writing this you can only create 5 certificates per domain in a sliding window of 7 days.
|
||||
|
||||
## "Certificate request has 123 names, maximum is 100."
|
||||
|
||||
This also is an API limit from letsencrypt, you are requesting to sign a certificate with way too many domains.
|
||||
This also is an API limit from boulder, you are requesting to sign a certificate with way too many domains.
|
||||
|
||||
## Invalid challenges
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ It will do that for any (sub-)domain you want to sign a certificate for.
|
||||
|
||||
At the moment you'll need to have that location available over normal HTTP on port 80 (redirect to HTTPS will work, but starting point is always HTTP!).
|
||||
|
||||
letsencrypt.sh has a config variable called `WELLKNOWN`, which corresponds to the directory which should be served under `/.well-known/acme-challenge` on your domain. So in the above example the token would have been saved as `$WELLKNOWN/m4g1C-t0k3n`.
|
||||
dehydrated.sh has a config variable called `WELLKNOWN`, which corresponds to the directory which should be served under `/.well-known/acme-challenge` on your domain. So in the above example the token would have been saved as `$WELLKNOWN/m4g1C-t0k3n`.
|
||||
|
||||
If you only have one docroot on your server you could easily do something like `WELLKNOWN=/var/www/.well-known/acme-challenge`, for anything else look at the example below.
|
||||
|
||||
@@ -13,7 +13,7 @@ If you only have one docroot on your server you could easily do something like `
|
||||
|
||||
If you have more than one docroot (or you are using your server as a reverse proxy / load balancer) the simple configuration mentioned above wouldn't work, but with just a few lines of webserver configuration this can be solved.
|
||||
|
||||
An example would be to create a directory `/var/www/letsencrypt` and set `WELLKNOWN=/var/www/letsencrypt` in the scripts config.
|
||||
An example would be to create a directory `/var/www/dehydrated` and set `WELLKNOWN=/var/www/dehydrated` in the scripts config.
|
||||
|
||||
You'll need to configure aliases on your Webserver:
|
||||
|
||||
@@ -25,7 +25,7 @@ With Nginx you'll need to add this to any of your `server`/VHost config blocks:
|
||||
server {
|
||||
[...]
|
||||
location /.well-known/acme-challenge {
|
||||
alias /var/www/letsencrypt;
|
||||
alias /var/www/dehydrated;
|
||||
}
|
||||
[...]
|
||||
}
|
||||
@@ -36,9 +36,9 @@ server {
|
||||
With Apache just add this to your config and it should work in any VHost:
|
||||
|
||||
```apache
|
||||
Alias /.well-known/acme-challenge /var/www/letsencrypt
|
||||
Alias /.well-known/acme-challenge /var/www/dehydrated
|
||||
|
||||
<Directory /var/www/letsencrypt>
|
||||
<Directory /var/www/dehydrated>
|
||||
Options None
|
||||
AllowOverride None
|
||||
|
||||
@@ -63,6 +63,6 @@ With Lighttpd just add this to your config and it should work in any VHost:
|
||||
modules += "alias"
|
||||
|
||||
alias.url += (
|
||||
"/.well-known/acme-challenge/" => "/var/www/letsencrypt/"
|
||||
"/.well-known/acme-challenge/" => "/var/www/dehydrated/"
|
||||
)
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user