Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
L
letsencrypt.sh
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
letsencrypt.sh
Commits
8662a000
Commit
8662a000
authored
Dec 14, 2015
by
Lukas Schauer
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
updated readme
parent
79ef6af2
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
24 additions
and
13 deletions
+24
-13
README.md
README.md
+24
-13
No files found.
README.md
View file @
8662a000
...
@@ -19,9 +19,28 @@ Feel free to report any issues you find with this script or contribute by submit
...
@@ -19,9 +19,28 @@ Feel free to report any issues you find with this script or contribute by submit
## Usage:
## Usage:
Add domains to domains.txt like in this example:
```
text
Usage: ./letsencrypt.sh [-h] [command [argument]] [parameter [argument]] [parameter [argument]] ...
Default command: cron
Commands:
--cron (-c) Sign/renew non-existant/changed(TODO)/expiring certificates.
--sign (-s) domain.tld Force-sign specific certificate from domains.txt, even if not yet expiring or changed.
--revoke (-r) path/to/cert.pem Revoke specified certificate
--help (-h) Show help text
--env (-e) Output configuration variables for use in other scripts
Parameters:
--config (-f) path/to/config.sh Use specified config file
--privkey (-p) path/to/key.pem Use specified private key instead of account key (useful for revocation)
```
```
### domains.txt
The file
`domains.txt`
should have the following format:
```
text
example.com www.example.com
example.com www.example.com
example.net www.example.net wiki.example.net
example.net www.example.net wiki.example.net
```
```
...
@@ -29,18 +48,7 @@ example.net www.example.net wiki.example.net
...
@@ -29,18 +48,7 @@ example.net www.example.net wiki.example.net
This states that there should be two certificates
`example.com`
and
`example.net`
,
This states that there should be two certificates
`example.com`
and
`example.net`
,
with the other domains in the corresponding line being their alternative names.
with the other domains in the corresponding line being their alternative names.
You'll also need to set up a webserver to serve the challenge-response directory as configured with
`$WELLKNOWN`
,
### example nginx config
or you can use the hook in the script if you want to deploy it some other way (e.g. copy it to a server via scp).
After doing those two things you can just
`./letsencrypt.sh`
, and it should generate certificates.
It can be used inside a cronjob as it automatically detects if a certificate is about to expire.
### Certificate revocation
Usage:
`./letsencrypt.sh revoke path/to/cert.pem`
### nginx config
If you want to use nginx you can set up a location block to serve your challenge responses:
If you want to use nginx you can set up a location block to serve your challenge responses:
...
@@ -50,6 +58,9 @@ location /.well-known/acme-challenge {
...
@@ -50,6 +58,9 @@ location /.well-known/acme-challenge {
}
}
```
```
For this to work i'd suggest either configuring
`/var/www/letsencrypt`
as WELLKNOWN directory,
or to create a symlink to the default location next to the script:
`ln -s /var/www/letsencrypt .acme-challenges`
## Import
## Import
### import-account.pl
### import-account.pl
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment