Commit Graph

  • f9126627a8 use lock file to prevent concurrent access Simon Ruderich 2015-12-08 17:50:46 +01:00
  • 85da9090ef fix missing variable Simon Ruderich 2015-12-08 17:36:29 +01:00
  • 10cf229981 check certificate to detect corruption Simon Ruderich 2015-12-08 16:39:34 +01:00
  • 43b00611b1 fixed output of config location Lukas Schauer 2015-12-08 16:54:34 +01:00
  • 0972918605 grab action urls from ca-directory Lukas Schauer 2015-12-08 16:38:25 +01:00
  • f527eef84a removed line-break in example config Lukas Schauer 2015-12-08 16:13:40 +01:00
  • 0b2119c494 _request: fix unset variable Simon Ruderich 2015-12-08 16:00:43 +01:00
  • 84fac54107 fix typo in error message Simon Ruderich 2015-12-08 15:19:02 +01:00
  • e32ea24c78 pass altname/domain as second argument to HOOK Simon Ruderich 2015-12-08 15:16:05 +01:00
  • 7f8ea450ff display errors from openssl Simon Ruderich 2015-12-08 15:15:08 +01:00
  • d322e072d6 import-certs.sh: simplify expiry check Simon Ruderich 2015-12-08 10:23:44 +01:00
  • 526843d66e ugly fix to syntax highlighting in Vim Simon Ruderich 2015-12-08 10:20:36 +01:00
  • e567a87e69 README.md: letsencrypt.sh is written in bash Simon Ruderich 2015-12-08 10:10:59 +01:00
  • ffa3542787 chmod +x import-account.pl Simon Ruderich 2015-12-08 10:09:04 +01:00
  • 1369c9afb8 replace echo with printf Simon Ruderich 2015-12-08 10:08:24 +01:00
  • cbe1eb2cda fix typo in comment Simon Ruderich 2015-12-08 10:06:52 +01:00
  • c10390fbd1 simplify expiry check Simon Ruderich 2015-12-08 10:06:17 +01:00
  • 3f6ff8f753 replace rm -f; ln -s with ln -sf Simon Ruderich 2015-12-08 10:04:44 +01:00
  • 454c164b25 Check for config file in various locations Lukas Schauer 2015-12-08 15:51:12 +01:00
  • 007da420a9 also add default CA definition in description of variable Lukas Schauer 2015-12-08 15:42:57 +01:00
  • 16943702a5 fixed default path to WELLKNOWN and moved SCRIPTDIR definition out of default-config block Lukas Schauer 2015-12-08 15:38:33 +01:00
  • cb6dc26c38 cleaned up example config Lukas Schauer 2015-12-08 15:35:45 +01:00
  • c24843c666 A single HOOK to handle challenge, cleaning of challenge files and uploading of certs. et@corde.org 2015-12-08 14:03:59 +01:00
  • 15accf9013 certificate comes first in fullchain.pem, fixes #26 Lukas Schauer 2015-12-08 14:46:50 +01:00
  • c70b77a90d added shebang to example config Lukas Schauer 2015-12-08 14:43:15 +01:00
  • ead15632ff making shellcheck happy Lukas Schauer 2015-12-08 14:42:26 +01:00
  • ea5b70a3d9 add CONTACT_EMAIL option on registration et@corde.org 2015-12-08 14:30:31 +01:00
  • 12c566b1d6 added certificate revocation to feature-list Lukas Schauer 2015-12-07 21:15:32 +01:00
  • 063d28a6dc implement revoke Markus Germeier 2015-12-07 19:51:54 +01:00
  • 0d7913ab61 renamed import scripts, updated readme Lukas Schauer 2015-12-07 14:56:04 +01:00
  • f343dc11e8 update symlinks after signing the certificate Lukas Schauer 2015-12-07 14:28:53 +01:00
  • c764d03ee2 making shellcheck happy Lukas Schauer 2015-12-07 14:00:51 +01:00
  • 2d93c6fb02 umask in import script Lukas Schauer 2015-12-07 13:22:25 +01:00
  • 067d7ee4ba added import script (allows import of existing certificates from the original letsencrypt client) Lukas Schauer 2015-12-07 13:21:12 +01:00
  • 329acb58b5 create fullchain.pem Lukas Schauer 2015-12-07 12:50:31 +01:00
  • 3cc587c224 also store csr with timestamp and symlink to default location Lukas Schauer 2015-12-07 12:41:03 +01:00
  • 1f08fda757 look for domains.txt under BASEDIR Lukas Schauer 2015-12-07 12:36:56 +01:00
  • 77df80b5a4 updated readme Lukas Schauer 2015-12-07 12:19:15 +01:00
  • 274e8e4192 updated readme Lukas Schauer 2015-12-07 12:18:06 +01:00
  • 00837b86ae delete challenge response after verification Lukas Schauer 2015-12-07 12:10:51 +01:00
  • 98a6c549ff parse challenges json differently to be compatible with bsd sed Lukas Schauer 2015-12-07 12:08:30 +01:00
  • 474f33d2ca added config option to set path for openssl config file (currently only used for generating a signing request) Lukas Schauer 2015-12-07 11:45:09 +01:00
  • cd13a9c21a use bash functionality instead of sed to filter SAN variable Lukas Schauer 2015-12-07 11:36:58 +01:00
  • 81cb6ac77b don't use '-r' on sed Lukas Schauer 2015-12-07 11:36:27 +01:00
  • 219b3e9d0a making shellcheck happy Lukas Schauer 2015-12-07 11:26:14 +01:00
  • 401f5f7597 use absolute path of script directory as default BASEDIR, remove trailing slash from BASEDIR Lukas Schauer 2015-12-07 11:21:26 +01:00
  • 09ed26de5b added default BASEDIR to example config Lukas Schauer 2015-12-07 11:15:10 +01:00
  • 5b29db9755 Store keys and certs in $BASEDIR Andrey Jr. Melnikov 2015-12-06 20:58:53 +03:00
  • 579e231631 Cleaner outputs Martin Geiseler 2015-12-06 18:22:17 +01:00
  • 5d24285f5e Merge pull request #13 from germeier/master Lukas Schauer 2015-12-06 18:42:04 +01:00
  • 9f93ef5e41 change openssl to use enddate for expiry date check Markus Germeier 2015-12-06 18:25:54 +01:00
  • 9c69b624c2 show expire date when we don't need to renew a certifcate Markus Germeier 2015-12-06 17:03:59 +01:00
  • ae8e5c8e17 Merge pull request #12 from germeier/newkeys Lukas Schauer 2015-12-06 16:47:58 +01:00
  • 3cb292cbb8 trying to capture http status codes from curl instead of using "--fail" to be able to capture acme error messages Lukas Schauer 2015-12-06 16:35:28 +01:00
  • 3dbbb461f1 generate a new private key for each csr if the user wishes so Markus Germeier 2015-12-06 16:27:15 +01:00
  • 831b973a89 Merge pull request #11 from germeier/fixpending Lukas Schauer 2015-12-06 16:09:49 +01:00
  • 76a37834be fixed logic to check status from our challenge Markus Germeier 2015-12-06 15:51:38 +01:00
  • 3390080ccb removed acme-challenges directory from git, create if needed Lukas Schauer 2015-12-06 15:41:49 +01:00
  • 440dc30d5e make config.sh optional Lukas Schauer 2015-12-06 15:38:52 +01:00
  • ff3dbc5819 default location for acme-challenges Lukas Schauer 2015-12-06 15:37:41 +01:00
  • e300c0a173 Renew timeframe as config option Martin Geiseler 2015-12-06 14:42:46 +01:00
  • 5060dea068 Check expire date of existing certs Martin Geiseler 2015-12-06 13:51:40 +01:00
  • b7439a83d6 don't overwrite certificate files Markus Germeier 2015-12-06 14:33:00 +01:00
  • 5a213f5f6a make openssl keysize configurable Markus Germeier 2015-12-06 12:14:51 +01:00
  • 96d7eabed4 use "-s" to detect content in temporary curl error logfile Lukas Schauer 2015-12-06 15:01:34 +01:00
  • c4be4c695a style: double quote to prevent globbing and word splitting Benjamin Dos Santos 2015-12-06 01:33:40 +01:00
  • dd5f36e536 style: [[ ... ]] is preferred over [, test and /usr/bin/[. Benjamin Dos Santos 2015-12-06 01:26:08 +01:00
  • 16a5589b45 Merge pull request #7 from rudis/master Lukas Schauer 2015-12-06 02:49:05 +01:00
  • b33f128893 add HOOK_CHALLENGE option to run a command before the reponse Simon Ruderich 2015-12-06 01:06:17 +01:00
  • d211fece4a use mkdir -p to create certs/$domain/ Simon Ruderich 2015-12-05 18:36:34 +01:00
  • 00a0937c1f make license agreement configurable as LICENSE Simon Ruderich 2015-12-05 18:25:02 +01:00
  • f11bb1db6e set CA setting per default Simon Ruderich 2015-12-05 18:23:22 +01:00
  • 1cd81e9f03 fix typo in error string Simon Ruderich 2015-12-05 18:17:33 +01:00
  • 730930a153 also remove tempfile for curl's stderr on error Simon Ruderich 2015-12-05 18:15:38 +01:00
  • 130ea6ab69 rewrap line Simon Ruderich 2015-12-05 18:15:11 +01:00
  • 2f9c639c2b simplify check for empty file Simon Ruderich 2015-12-05 18:14:32 +01:00
  • d6d11a75e6 quote output filename Simon Ruderich 2015-12-05 18:07:54 +01:00
  • 2e8454b46e use "/usr/bin/env bash" instead of "/bin/bash" Lukas Schauer 2015-12-05 22:30:00 +01:00
  • c6e6030269 big portability + readability fix: use openssl base64 instead of system base64, use shasum instead of shasum, added some comments Lukas Schauer 2015-12-05 22:27:58 +01:00
  • 6221526df5 fixed issue #4 (multiple domains per line) Lukas Schauer 2015-12-05 22:07:03 +01:00
  • 20e7d9d7a7 removed perl dependency Lukas Schauer 2015-12-05 22:06:36 +01:00
  • 69f3e78b7e fail in pipes too Lukas Schauer 2015-12-05 18:03:06 +01:00
  • 7ec1e45aa6 fixed curl error message Lukas Schauer 2015-12-05 17:42:09 +01:00
  • 91ce50afe2 trying to catch curl errors Lukas Schauer 2015-12-05 17:40:21 +01:00
  • 2b5df371a9 make challenge files world-readable Lukas Schauer 2015-12-05 16:57:04 +01:00
  • f8013d9243 Merge pull request #1 from rudis/master Lukas Schauer 2015-12-05 16:53:00 +01:00
  • 181dd0ff2a use umask 077 to protect private keys Simon Ruderich 2015-12-05 14:52:40 +01:00
  • fb1790cdfa use set -u to catch uninitialized variables Simon Ruderich 2015-12-05 14:30:32 +01:00
  • 5fedf3b3ca replace source with . Simon Ruderich 2015-12-05 14:26:53 +01:00
  • 2f3ee624c5 use [ -z .. ] instead of explicit compare with "" Simon Ruderich 2015-12-05 14:25:11 +01:00
  • 2d6cb75f8a use curl -sSf to display error messages on failure Simon Ruderich 2015-12-05 14:52:26 +01:00
  • 4aa48d33d5 replace echo (-n) with printf Simon Ruderich 2015-12-05 14:08:41 +01:00
  • a53cd91694 remove useless cat Simon Ruderich 2015-12-05 14:22:28 +01:00
  • a162121416 fix typo in variable name Simon Ruderich 2015-12-05 14:22:13 +01:00
  • 1f65a33525 don't use assign array to string ($@ -> $*) Simon Ruderich 2015-12-05 14:21:49 +01:00
  • 2e9c7a8c71 add missing quotes Simon Ruderich 2015-12-05 14:21:32 +01:00
  • 199b70b651 replace variable with %s in printf format string Simon Ruderich 2015-12-05 14:15:46 +01:00
  • 9fe313d887 add hex2bin helper function Simon Ruderich 2015-12-05 16:29:55 +01:00
  • fcb5a03b48 fix pubMod64 and thumbprint calculation Simon Ruderich 2015-12-05 16:27:30 +01:00
  • abb956936c check for errors on token retrieval Lukas Schauer 2015-12-05 03:14:23 +01:00