letsencrypt/acme client implemented as a shell-script
https://github.com/lukas2511/dehydrated
A client for signing certificates with an ACME-server (currently only provided by letsencrypt) implemented as a relatively simple bash-script.
It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed.
Other dependencies are: curl, sed, grep, mktemp (all found on almost any system, curl being the only exception)
Current features:
* Signing of a list of domains
* Signing of a CSR
* Renewal if a certificate is about to expire or SAN (subdomains) changed
* Certificate revocation
- Developed at security:dehydrated
- Sources inherited from project openSUSE:Factory
-
3
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Backports:SLE-15-SP4:SLECandidates/dehydrated && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
|
0001-Add-optional-user-and-group-configuration.pat |
0000001950 1.9 KB | |
|
0002-use-nullglob-disable-warning-on-empty-CONFIG_ |
0000001839 1.8 KB | |
| README.Fedora | 0000000163 163 Bytes | |
| README.SUSE | 0000006036 5.89 KB | |
| README.hooks | 0000000223 223 Bytes | |
| acme-challenge.conf.apache.in | 0000000176 176 Bytes | |
| acme-challenge.conf.lighttpd.in | 0000000098 98 Bytes | |
| acme-challenge.conf.nginx.in | 0000000528 528 Bytes | |
| dehydrated-0.4.0.tar.gz | 0000074005 72.3 KB | |
| dehydrated.1 | 0000005656 5.52 KB | |
| dehydrated.changes | 0000007562 7.38 KB | |
| dehydrated.cron.in | 0000000263 263 Bytes | |
| dehydrated.service.in | 0000000441 441 Bytes | |
| dehydrated.spec | 0000010065 9.83 KB | |
| dehydrated.timer | 0000000168 168 Bytes | |
| dehydrated.tmpfiles.d | 0000000135 135 Bytes |
Revision 4 (latest revision is 27)
Dominique Leuenberger (dimstar_suse)
accepted
request 532177
from
Daniel Molkentin (dmolkentin)
(revision 4)
- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
see README.SUSE for details. (not to be confused with the native hooks
run as dehyrated user)
- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
Will be approach differently
- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner
- Add man page
- Ensure dehydrated is always run as designated user
* adds 0001-Add-optional-user-and-group-configuration.patch
- Introduce config.d directory for user configuration
- Avoid warning about empty config.d directory
* adds 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
- Fix sed warning about unescaped curly braces in regex
- Swap statements in post: installing services requires tmp.d
- (Weak) dependency on dehydrated-acmeresponder.
Comments 0