Jason Francis
42a0fc9a5e
fix tls-alpn-01 configuration example
2020-07-05 22:30:38 +02:00
Lukas Schauer
e119d9136b
fixed some typos ( fixes #725 , fixes #741 , fixes #740 )
2020-07-05 22:29:57 +02:00
Lukas Schauer
9827a411b3
removed instructions for importing from "official" client (certbot) as it probably doesn't work anymore and there isn't really much use for it anyway
2020-04-28 21:29:24 +02:00
Lukas Schauer
4a55f93896
fix link to wiki in documentation ( fixes #690 )
2020-04-28 21:27:49 +02:00
Lukas Schauer
74a536c161
added documentation about possible future removal of api version 1
2019-03-04 23:23:40 +01:00
Lukas Schauer
133e31de0b
tiny documentation fix: per-certificate-config can override PRIVATE_KEY_ROLLOVER ( closes #614 )
2019-03-03 20:38:47 +01:00
Lukas Schauer
e4a32acbe2
new hook: sync_cert ( closes #609 )
2019-03-03 20:22:41 +01:00
Lukas Schauer
1c77730373
call exit_hook with error message ( fixes #630 )
2019-03-03 20:08:18 +01:00
Lukas Schauer
92aa1ecd5a
document DOMAINS_D parameter in example config ( fixes #575 , closes #582 )
2018-10-20 13:05:20 +02:00
Lukas Schauer
fba49ba28e
implemented initial support for tls-alpn-01 verification
2018-07-26 04:44:29 +02:00
Lukas Schauer
2a8af8fda7
made ocsp refresh interval configurable
2018-05-07 03:31:43 +02:00
Lukas Schauer
9165cfdebf
added dns-txt-foo to troubleshooting.md
2018-05-01 17:54:13 +02:00
Lukas Schauer
89de83c994
add explanation on HEADERS parameter to request_failure hook ( fixes #545 )
2018-04-25 22:48:16 +02:00
Tobias Tiederle
53c458c318
fix parameter
2018-04-15 16:08:30 +02:00
Lukas Schauer
8ba56a8048
renamed ocsp hook to deploy_ocsp, exported altnames, added example hook
2018-04-08 22:44:28 +02:00
Daniel Molkentin
13b8a3f29f
fix date in man page
2018-04-08 22:21:33 +02:00
John L. Villalovos
7c40c727a0
Improve documentation on wildcards
...
Improve the documentation on how to use wildcard domains.
Also give more examples in the docs/examples/domains.txt file.
2018-03-17 13:27:15 +01:00
Lukas Schauer
b93eac3893
fixed CA url in example config
2018-03-13 21:08:20 +01:00
Lukas Schauer
0211d24577
require a valid alias to be set for certain wildcard certificates ( fixes #483 )
2018-03-02 18:53:00 +01:00
Lukas Schauer
5940c55e18
prepared future migration to new acmev2 endpoint
2018-02-07 03:14:29 +01:00
Lukas Schauer
2eedd69ee9
request_failure hook: added http response headers as new parameter
2018-02-06 23:33:28 +01:00
Lukas Schauer
082ed17a0a
added acmev2 staging information to docs
2018-02-06 21:58:42 +01:00
Lukas Schauer
dec5ad5840
read url to terms of service from ca directory
2018-02-06 21:58:42 +01:00
Lukas Schauer
83bf2664b0
added a few simple example use cases to example hook script
2018-02-06 21:13:37 +01:00
Lukas Schauer
63854b752b
New hook: generate_csr (see example hook script for more information, implements #475 , replaces #377 )
2018-02-06 20:57:33 +01:00
Mattia Rizzolo
62d37c9b3d
Fix grammer error in the manpage ( fixes #466 )
...
"allows to" requires a subject (e.g. "allows one to"), without it's just
syntactically wrong. Change the verb entirely to workaround the
problem.
2018-02-06 19:14:12 +01:00
Lukas Schauer
b53cb6643b
moved manpage to docs directory
2018-02-06 18:53:21 +01:00
Lukas Schauer
fb41783885
automatic discovery of remote acme api version
2018-02-05 19:20:28 +01:00
Lukas Schauer
6d02bfdb42
shrink "logo" a bit
2018-02-03 22:14:43 +01:00
Lukas Schauer
afba7c694c
moved deploy_challenge to earlier loop so it works with multiple challenge tokens on the same identifier (important for wildcard certificate), fixed array-name, removed hook-chain warning
2018-01-28 19:48:25 +01:00
Pandark
471899b4d8
Add ^~ to nginx location block
...
To make sure it is not overridden.
> http://nginx.org/en/docs/http/ngx_http_core_module.html#location :
> If the longest matching prefix location has the “^~” modifier then regular expressions are not checked.
2018-01-28 06:18:10 +01:00
Lukas Schauer
0f69481e2b
rewrote challenge validation to iterate over authorizations instead of altnames (fixes some acmev2 validation edgecases), also removed broken test-script (for now)
2018-01-28 06:13:37 +01:00
Martin Strobel
68cb1e0661
ACME v02 Support
2018-01-13 20:17:25 +01:00
Lukas Schauer
2adc57791c
Add optional user and group configuration ( fixes #434 )
2017-12-18 00:35:26 +01:00
Lukas Schauer
c62f3d91fc
implement certificate aliases as suggested by typingArtist ( fixes #396 )
2017-12-17 23:50:46 +01:00
sirrkitt
88267db7e2
Update wellknown.md
...
add Hiawatha to list
2017-12-14 00:33:11 +01:00
Lukas Schauer
58647cab65
added OPENSSL variable to example config ( #414 )
2017-07-18 15:46:25 +02:00
Lukas Schauer
ee75c5dca7
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385 )
2017-07-11 00:28:36 +02:00
Lukas Schauer
60583d3ef9
added hook to run before cron command ( fixes #371 )
2017-07-10 21:36:10 +02:00
Lukas Schauer
e6d6882c78
added option to automatically run cleanup routine (implements #389 )
2017-07-10 20:21:30 +02:00
ProBackup-nl
875c1f74e5
Add some formatting to improve human scannability (while reading)
2017-07-10 19:53:39 +02:00
Lukas Schauer
d1f215b652
fixed typos as suggested by @jwilk ( closes #369 )
2017-07-10 16:55:18 +02:00
Andreas Thienemann
bd57777c62
Ability to provide extra curl options
...
In some situations it might be necessary to pass extra commands to
the curl binary, e.g. proxy authentication credentials.
Adds the CURL_OPTS config option.
2017-07-10 16:44:39 +02:00
Ben Elliston
33c77e6daa
Add some comments about IPv6.
2017-07-10 15:26:50 +02:00
Lukas Schauer
d685463673
implemented issuer-chain cache
2017-07-10 15:06:50 +02:00
Simon Deziel
fe17753dd5
Invoke bash through /usr/bin/env
2017-01-30 20:47:23 -05:00
Simon Deziel
27a416511f
The example hook script uses bash test regex
...
Use bash explictly as done for the main script.
Signed-off-by: Simon Deziel <simon.deziel@gmail.com >
2017-01-30 20:36:19 -05:00
Lukas Schauer
e5452922e9
whitelist handlers for example hook ( fixes #348 )
2017-01-30 03:53:59 +01:00
Lukas Schauer
6a32f20e00
ask user to read and accept license, added register-command, fullchain.pem is now actually the full chain
2017-01-29 22:06:53 +01:00
Lukas Schauer
298a7e9aaf
added exit_hook hook
2017-01-29 15:48:03 +01:00