Lukas Schauer
89de83c994
add explanation on HEADERS parameter to request_failure hook ( fixes #545 )
2018-04-25 22:48:16 +02:00
Tobias Tiederle
53c458c318
fix parameter
2018-04-15 16:08:30 +02:00
Lukas Schauer
8ba56a8048
renamed ocsp hook to deploy_ocsp, exported altnames, added example hook
2018-04-08 22:44:28 +02:00
John L. Villalovos
7c40c727a0
Improve documentation on wildcards
...
Improve the documentation on how to use wildcard domains.
Also give more examples in the docs/examples/domains.txt file.
2018-03-17 13:27:15 +01:00
Lukas Schauer
b93eac3893
fixed CA url in example config
2018-03-13 21:08:20 +01:00
Lukas Schauer
5940c55e18
prepared future migration to new acmev2 endpoint
2018-02-07 03:14:29 +01:00
Lukas Schauer
2eedd69ee9
request_failure hook: added http response headers as new parameter
2018-02-06 23:33:28 +01:00
Lukas Schauer
dec5ad5840
read url to terms of service from ca directory
2018-02-06 21:58:42 +01:00
Lukas Schauer
83bf2664b0
added a few simple example use cases to example hook script
2018-02-06 21:13:37 +01:00
Lukas Schauer
63854b752b
New hook: generate_csr (see example hook script for more information, implements #475 , replaces #377 )
2018-02-06 20:57:33 +01:00
Lukas Schauer
fb41783885
automatic discovery of remote acme api version
2018-02-05 19:20:28 +01:00
Martin Strobel
68cb1e0661
ACME v02 Support
2018-01-13 20:17:25 +01:00
Lukas Schauer
2adc57791c
Add optional user and group configuration ( fixes #434 )
2017-12-18 00:35:26 +01:00
Lukas Schauer
58647cab65
added OPENSSL variable to example config ( #414 )
2017-07-18 15:46:25 +02:00
Lukas Schauer
ee75c5dca7
Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385 )
2017-07-11 00:28:36 +02:00
Lukas Schauer
60583d3ef9
added hook to run before cron command ( fixes #371 )
2017-07-10 21:36:10 +02:00
Lukas Schauer
e6d6882c78
added option to automatically run cleanup routine (implements #389 )
2017-07-10 20:21:30 +02:00
Lukas Schauer
d1f215b652
fixed typos as suggested by @jwilk ( closes #369 )
2017-07-10 16:55:18 +02:00
Andreas Thienemann
bd57777c62
Ability to provide extra curl options
...
In some situations it might be necessary to pass extra commands to
the curl binary, e.g. proxy authentication credentials.
Adds the CURL_OPTS config option.
2017-07-10 16:44:39 +02:00
Lukas Schauer
d685463673
implemented issuer-chain cache
2017-07-10 15:06:50 +02:00
Simon Deziel
fe17753dd5
Invoke bash through /usr/bin/env
2017-01-30 20:47:23 -05:00
Simon Deziel
27a416511f
The example hook script uses bash test regex
...
Use bash explictly as done for the main script.
Signed-off-by: Simon Deziel <simon.deziel@gmail.com >
2017-01-30 20:36:19 -05:00
Lukas Schauer
e5452922e9
whitelist handlers for example hook ( fixes #348 )
2017-01-30 03:53:59 +01:00
Lukas Schauer
6a32f20e00
ask user to read and accept license, added register-command, fullchain.pem is now actually the full chain
2017-01-29 22:06:53 +01:00
Lukas Schauer
298a7e9aaf
added exit_hook hook
2017-01-29 15:48:03 +01:00
Nicolás Kovac
81eecedc5a
Fix: bash to sh notation on invalid_challenge() hook
2017-01-06 00:18:57 +01:00
nkovacne
404dc3fe0f
Adding the request_failure hook ( #326 )
2017-01-06 00:15:51 +01:00
nkovacne
318cf2011d
Adding the invalid_challenge hook ( #278 )
2016-12-18 20:31:08 +01:00
crza
a13e410363
Basic implementation for private key rollover ( #294 )
...
* initial commit for PRIVATE_KEY_ROLLOVER
* fix if syntax
* rolloverkey without timestamps
* update example config: PRIVATE_KEY_ROLLOVER
* rolloverkey creation logic updated
* updated tests. untested.
* added cleanup for rolloverkeys: if disabled, delete privkey.roll.pem
2016-10-17 22:40:03 +02:00
Elan Ruusamäe
83fa54cc38
examples/hook: no bashism ( #300 )
...
use plain shell syntax,
also protect against if arguments contain spaces.
2016-10-17 22:08:14 +02:00
leonklingele
caeed7d5e3
Make example hook.sh file executable. ( #253 )
...
So one can easily `cp docs/examples/hook.sh .`
2016-09-14 15:11:25 +02:00
Lukas Schauer
ec49a4433b
fixed a few things after project rename
2016-09-13 20:00:43 +02:00
Lukas Schauer
64e35463cb
renamed project to dehydrated and main script to dehydrated.sh
2016-09-13 19:48:27 +02:00
leonklingele
3a66a7f8d2
Fix default license help text in example config ( #254 )
2016-08-06 15:32:53 +02:00
Lukas Schauer
afabfff06e
updated url to letsencrypt license agreement
2016-08-01 20:35:46 +02:00
Lukas Schauer
194464b04b
Default WELLKNOWN location is now /var/www/letsencrypt
...
With this change private and public files are now separated by default.
2016-07-20 17:04:25 +02:00
chkhanu
364bcccf74
Added option to select IP version of name to address resolution ( #231 )
2016-07-20 16:49:04 +02:00
Lukas Schauer
194d543fa1
removed ACCOUNT_KEY and ACCOUNT_KEY_JSON from example config
2016-06-04 11:12:30 +02:00
Lukas Schauer
034ec30c7d
added multi-account support ( fixes #92 , #163 )
2016-06-04 04:01:24 +02:00
Lukas Schauer
8e77ba5e02
added option to set csr-flag indicating ocsp stapling to be mandatory
2016-05-26 15:02:23 +02:00
Alex Macleod
785ffa5539
Make certificate output location configurable ( #210 )
2016-05-26 14:53:01 +02:00
Lukas Schauer
d5b285868e
renamed "config.sh" to "config"
2016-05-22 22:34:28 +02:00
Daniel Beyer
722430039b
Remove unneded shebang for config.sh.example
2016-05-22 22:25:14 +02:00
Daniel Beyer
a3e5ed361b
Make location of domains.txt configurable ( #204 )
...
This is implemented by defining ${DOMAINS_TXT} in config.sh. If not
set in config.sh, it defaults to the previously (hard-coded) location,
which is ${BASEDIR}/domains.txt.
2016-05-22 18:49:17 +02:00
Lukas Schauer
e608dc2ba8
Renew private key by default, but keep option to disable this feature
2016-05-10 22:14:23 +02:00
Lukas Schauer
af2bc7a94f
Revert "Removed option to reuse old private keys." (useful for HKPK, see #195 )
...
This reverts commit 4dc9953319 .
2016-05-10 22:11:57 +02:00
Lukas Schauer
4dc9953319
Removed option to reuse old private keys.
...
I have no idea why I thought reusing the keys would be a good idea
when I first started this...
2016-05-08 15:57:15 +02:00
Lukas Schauer
adef40762c
updated config example: PRIVATE_KEY is now ACCOUNT_KEY
2016-04-24 19:56:31 +02:00
Lukas Schauer
b0e2ecde5f
added timestamp parameter to deploy_cert function of example hook script (related to #156 )
2016-04-15 01:34:23 +02:00
Lukas Schauer
65a834ba3e
moved example files to docs/examples directory
2016-03-26 01:41:13 +01:00