Commit Graph

40 Commits

Author SHA1 Message Date
Lukas Schauer
fb41783885 automatic discovery of remote acme api version 2018-02-05 19:20:28 +01:00
Martin Strobel
68cb1e0661 ACME v02 Support 2018-01-13 20:17:25 +01:00
Lukas Schauer
2adc57791c Add optional user and group configuration (fixes #434) 2017-12-18 00:35:26 +01:00
Lukas Schauer
58647cab65 added OPENSSL variable to example config (#414) 2017-07-18 15:46:25 +02:00
Lukas Schauer
ee75c5dca7 Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385) 2017-07-11 00:28:36 +02:00
Lukas Schauer
60583d3ef9 added hook to run before cron command (fixes #371) 2017-07-10 21:36:10 +02:00
Lukas Schauer
e6d6882c78 added option to automatically run cleanup routine (implements #389) 2017-07-10 20:21:30 +02:00
Lukas Schauer
d1f215b652 fixed typos as suggested by @jwilk (closes #369) 2017-07-10 16:55:18 +02:00
Andreas Thienemann
bd57777c62 Ability to provide extra curl options
In some situations it might be necessary to pass extra commands to
the curl binary, e.g. proxy authentication credentials.

Adds the CURL_OPTS config option.
2017-07-10 16:44:39 +02:00
Lukas Schauer
d685463673 implemented issuer-chain cache 2017-07-10 15:06:50 +02:00
Simon Deziel
fe17753dd5 Invoke bash through /usr/bin/env 2017-01-30 20:47:23 -05:00
Simon Deziel
27a416511f The example hook script uses bash test regex
Use bash explictly as done for the main script.

Signed-off-by: Simon Deziel <simon.deziel@gmail.com>
2017-01-30 20:36:19 -05:00
Lukas Schauer
e5452922e9 whitelist handlers for example hook (fixes #348) 2017-01-30 03:53:59 +01:00
Lukas Schauer
6a32f20e00 ask user to read and accept license, added register-command, fullchain.pem is now actually the full chain 2017-01-29 22:06:53 +01:00
Lukas Schauer
298a7e9aaf added exit_hook hook 2017-01-29 15:48:03 +01:00
Nicolás Kovac
81eecedc5a Fix: bash to sh notation on invalid_challenge() hook 2017-01-06 00:18:57 +01:00
nkovacne
404dc3fe0f Adding the request_failure hook (#326) 2017-01-06 00:15:51 +01:00
nkovacne
318cf2011d Adding the invalid_challenge hook (#278) 2016-12-18 20:31:08 +01:00
crza
a13e410363 Basic implementation for private key rollover (#294)
* initial commit for PRIVATE_KEY_ROLLOVER

* fix if syntax

* rolloverkey without  timestamps

* update example config: PRIVATE_KEY_ROLLOVER

* rolloverkey creation logic updated

* updated tests. untested.

* added cleanup for rolloverkeys: if disabled, delete privkey.roll.pem
2016-10-17 22:40:03 +02:00
Elan Ruusamäe
83fa54cc38 examples/hook: no bashism (#300)
use plain shell syntax,
also protect against if arguments contain spaces.
2016-10-17 22:08:14 +02:00
leonklingele
caeed7d5e3 Make example hook.sh file executable. (#253)
So one can easily `cp docs/examples/hook.sh .`
2016-09-14 15:11:25 +02:00
Lukas Schauer
ec49a4433b fixed a few things after project rename 2016-09-13 20:00:43 +02:00
Lukas Schauer
64e35463cb renamed project to dehydrated and main script to dehydrated.sh 2016-09-13 19:48:27 +02:00
leonklingele
3a66a7f8d2 Fix default license help text in example config (#254) 2016-08-06 15:32:53 +02:00
Lukas Schauer
afabfff06e updated url to letsencrypt license agreement 2016-08-01 20:35:46 +02:00
Lukas Schauer
194464b04b Default WELLKNOWN location is now /var/www/letsencrypt
With this change private and public files are now separated by default.
2016-07-20 17:04:25 +02:00
chkhanu
364bcccf74 Added option to select IP version of name to address resolution (#231) 2016-07-20 16:49:04 +02:00
Lukas Schauer
194d543fa1 removed ACCOUNT_KEY and ACCOUNT_KEY_JSON from example config 2016-06-04 11:12:30 +02:00
Lukas Schauer
034ec30c7d added multi-account support (fixes #92, #163) 2016-06-04 04:01:24 +02:00
Lukas Schauer
8e77ba5e02 added option to set csr-flag indicating ocsp stapling to be mandatory 2016-05-26 15:02:23 +02:00
Alex Macleod
785ffa5539 Make certificate output location configurable (#210) 2016-05-26 14:53:01 +02:00
Lukas Schauer
d5b285868e renamed "config.sh" to "config" 2016-05-22 22:34:28 +02:00
Daniel Beyer
722430039b Remove unneded shebang for config.sh.example 2016-05-22 22:25:14 +02:00
Daniel Beyer
a3e5ed361b Make location of domains.txt configurable (#204)
This is implemented by defining ${DOMAINS_TXT} in config.sh. If not
set in config.sh, it defaults to the previously (hard-coded) location,
which is ${BASEDIR}/domains.txt.
2016-05-22 18:49:17 +02:00
Lukas Schauer
e608dc2ba8 Renew private key by default, but keep option to disable this feature 2016-05-10 22:14:23 +02:00
Lukas Schauer
af2bc7a94f Revert "Removed option to reuse old private keys." (useful for HKPK, see #195)
This reverts commit 4dc9953319.
2016-05-10 22:11:57 +02:00
Lukas Schauer
4dc9953319 Removed option to reuse old private keys.
I have no idea why I thought reusing the keys would be a good idea
when I first started this...
2016-05-08 15:57:15 +02:00
Lukas Schauer
adef40762c updated config example: PRIVATE_KEY is now ACCOUNT_KEY 2016-04-24 19:56:31 +02:00
Lukas Schauer
b0e2ecde5f added timestamp parameter to deploy_cert function of example hook script (related to #156) 2016-04-15 01:34:23 +02:00
Lukas Schauer
65a834ba3e moved example files to docs/examples directory 2016-03-26 01:41:13 +01:00