8456855e48
Add new parameter --lock-suffix. ( #287 )
...
* Add new parameter --lock-suffix.
This enables automation systems to run multiple instances of dehydrated
while still maintaining a locking facility. This is necessary for
projects like https://github.com/GUI/lua-resty-auto-ssl .
With this feature, one could run the script multiple times, while still
having a form of locking:
./dehydrated --lock-suffix test1.example.com -d test1.example.com
./dehydrated --lock-suffix test2.example.com -d test2.example.com
./dehydrated --lock-suffix test3.example.com -d test3.example.com
./dehydrated --lock-suffix test4.example.com -d test4.example.com
./dehydrated --lock-suffix test5.example.com -d test5.example.com
When starts the script with the same locking suffix, the scripts exits
like it normally would when locked. This will give you the benefits of
using --no-lock, without the disadvantages of it.
* Fixed unbound variable error for new PARAM_LOCKFILE_SUFFIX.
2016-12-18 20:25:49 +01:00
9729751d93
Skip challenge for already validated domains ( #293 )
...
* skip challenge for already validated domains
* only call deploy_challenge hook if there is work
No need to call the hook if there are no challenges to deploy
2016-12-18 20:25:05 +01:00
6086983c02
Minor Grammar Stuff ( #319 )
...
* typo
s/pullrequest/pull request/
* proper noun & possessive apostrophe
s/letsencrypts/Let's Encrypt's/
* proper noun / spacing /
s/curl/cURL/
s/letsencryprt/Let's Encrypt/
2016-12-18 20:19:19 +01:00
607c89cae2
updated ngrok url in test.sh
2016-10-17 22:46:28 +02:00
a13e410363
Basic implementation for private key rollover ( #294 )
...
* initial commit for PRIVATE_KEY_ROLLOVER
* fix if syntax
* rolloverkey without timestamps
* update example config: PRIVATE_KEY_ROLLOVER
* rolloverkey creation logic updated
* updated tests. untested.
* added cleanup for rolloverkeys: if disabled, delete privkey.roll.pem
2016-10-17 22:40:03 +02:00
d62a5eeb1e
fix lighttpd syntax ( #299 )
...
at least in 1.4 the syntax is `server.modules` and it's an array.
and it's always good idea to keep trailing comma to avoid syntax errors when adding new entries.
2016-10-17 22:11:34 +02:00
83fa54cc38
examples/hook: no bashism ( #300 )
...
use plain shell syntax,
also protect against if arguments contain spaces.
2016-10-17 22:08:14 +02:00
a316a094df
Revert "strip leading null-bytes from urlbase64" (see #282 )
...
This reverts commit 319852dc8c
2016-09-21 13:20:51 +02:00
319852dc8c
strip leading null-bytes from urlbase64 ( fixes #275 )
2016-09-17 13:15:15 +02:00
7eca8aec5a
use temporary file for DER->PEM conversion ( fixes #279 )
2016-09-17 13:02:48 +02:00
0c1e958d19
added temporary wrapper script for compatibility with old config locations and symlinks, will be removed in a few weeks
2016-09-17 12:46:46 +02:00
caeed7d5e3
Make example hook.sh file executable. ( #253 )
...
So one can easily `cp docs/examples/hook.sh .`
2016-09-14 15:11:25 +02:00
047ba60d0d
updated date in license file
...
really early for this change
2016-09-13 20:39:10 +02:00
b95b15cad6
update readme with explanation why this project was renamed
2016-09-13 20:15:30 +02:00
ec49a4433b
fixed a few things after project rename
2016-09-13 20:00:43 +02:00
0ae567aced
Update CHANGELOG
2016-09-13 19:55:34 +02:00
6c12f97b9f
readme fix
2016-09-13 19:53:43 +02:00
64e35463cb
renamed project to dehydrated and main script to dehydrated.sh
2016-09-13 19:48:27 +02:00
992beecbdb
release v0.3.0
2016-09-07 21:20:28 +02:00
6192b33ac2
ECDSA is supported since February 10, 2016 ( #260 )
...
Let's Encrypt will however sign all ECDSA certs with an RSA intermediate certificate.
https://letsencrypt.org/upcoming-features/
2016-08-22 15:40:37 +02:00
47602dea04
Update staging doc: Let's Encrypt is no longer in beta. ( #259 )
2016-08-22 15:38:29 +02:00
3a66a7f8d2
Fix default license help text in example config ( #254 )
2016-08-06 15:32:53 +02:00
624ce4436a
updated readme
2016-08-04 00:11:08 +02:00
d81eb58536
Only print full chain on signcsr command if --full-chain/-fc is set (related to #150 )
2016-08-04 00:11:02 +02:00
117d5d6228
Echo newline after error details
2016-08-03 23:50:59 +02:00
34565c193d
Add support for --keep-going in cron mode
...
Fixes #154
2016-08-03 23:50:59 +02:00
ca0249c46c
Update staging.md
2016-08-03 23:47:57 +02:00
afabfff06e
updated url to letsencrypt license agreement
2016-08-01 20:35:46 +02:00
bd9cc5b0c4
Added option to run letsencrypt.sh without locks
...
This should only be used when letsencrypt.sh is under control by a
different script which makes sure that no two processes are touching the
same files.
2016-07-21 12:34:40 +02:00
194464b04b
Default WELLKNOWN location is now /var/www/letsencrypt
...
With this change private and public files are now separated by default.
2016-07-20 17:04:25 +02:00
364bcccf74
Added option to select IP version of name to address resolution ( #231 )
2016-07-20 16:49:04 +02:00
44aca90cd7
Introduce per cert configuration directory DOMAINS_D ( #242 )
2016-07-13 13:23:15 +02:00
2042b177c7
modified lighttpd example config
2016-06-10 23:41:59 +02:00
ae98ff6767
Add Lighttpd example to wellknown.md ( #224 )
2016-06-08 01:49:50 +02:00
194d543fa1
removed ACCOUNT_KEY and ACCOUNT_KEY_JSON from example config
2016-06-04 11:12:30 +02:00
df292dece2
Include method and URL in curl error ( #214 )
...
In case curl gives an error, it's helpful to know the URL
being tried and the method. In the GET case, one can easily
retry in the shell and debug this.
2016-06-04 04:15:16 +02:00
f4138efab9
changed dependency check for diff to be compatible with openbsd diff ( fixes #219 )
2016-06-04 04:12:21 +02:00
034ec30c7d
added multi-account support ( fixes #92 , #163 )
2016-06-04 04:01:24 +02:00
ec48906992
initial support for configuration on per-certificate base ( #105 )
2016-05-26 17:11:42 +02:00
64864f5fa6
added signcsr change to CHANGELOG
2016-05-26 16:04:01 +02:00
620c7eb23e
output CA cert for signcsr command ( fixes #150 )
2016-05-26 15:44:59 +02:00
4e8f944b72
added CERTDIR change to CHANGELOG
2016-05-26 15:06:07 +02:00
8e77ba5e02
added option to set csr-flag indicating ocsp stapling to be mandatory
2016-05-26 15:02:23 +02:00
0d8b928923
Check that the detected config is a file ( #211 )
2016-05-26 15:02:15 +02:00
785ffa5539
Make certificate output location configurable ( #210 )
2016-05-26 14:53:01 +02:00
d5b285868e
renamed "config.sh" to "config"
2016-05-22 22:34:28 +02:00
722430039b
Remove unneded shebang for config.sh.example
2016-05-22 22:25:14 +02:00
41aae07343
Update CHANGELOG
2016-05-22 18:50:17 +02:00
a3e5ed361b
Make location of domains.txt configurable ( #204 )
...
This is implemented by defining ${DOMAINS_TXT} in config.sh. If not
set in config.sh, it defaults to the previously (hard-coded) location,
which is ${BASEDIR}/domains.txt.
2016-05-22 18:49:17 +02:00
2b50c72b75
release version 0.2.0
2016-05-22 16:10:12 +02:00
Eihrister