1
0
Fork 0
Commit Graph

174 Commits

Author SHA1 Message Date
Nicolas Duchon e9abac8b12
chore: project name change 2021-04-05 00:27:52 +02:00
Logan Kennelly ffffdc86bd Fix unintentional file globbing during wildcard lookup
Matching globs are common because the script runs in the certs
directory.

The test uses a suffix match as the test domains don't include
subdomains, although such cases should probably be considered.

Fix the le3.wtf test. The existing add_location_configuration modifies
"default"; a second add is not necessary.

Fixes #763
2021-03-15 18:14:22 -07:00
Danil Smirnov 42ddbcb580 Renaming and adding documentation 2020-12-29 15:09:03 +02:00
Danil Smirnov b47755b875 Making time to wait configurable 2020-12-29 13:13:45 +02:00
Nicolas Duchon c610b59006
Add CA_BUNDLE environment variable
Allows acme.sh to use an alternative trusted root CA
2020-12-28 11:31:01 +01:00
Nicolas Duchon be654b5d27
Add OCSP Must-Staple extension feature (#740) 2020-12-25 18:23:33 +01:00
Nicolas Duchon 1752a420fa
Merge pull request #727 from buchdag/ci-fix
Fix LETSENCRYPT_KEYSIZE feature and tests
2020-12-08 23:58:58 +01:00
Benoit Garret 5f0bde1be4 Allow ZEROSSL_API_KEY on the letsencrypt container 2020-12-07 21:57:50 +01:00
Nicolas Duchon 6bfdd87109
Fix private keys types 2020-12-07 21:10:14 +01:00
Nicolas Duchon 082ad32f49
Fix the private_keys test 2020-12-07 21:05:32 +01:00
Nicolas Duchon 73b7186d6d
Raise back docker-gen debounce a bit 2020-12-07 00:57:22 +01:00
Nicolas Duchon 3d0cd89668
Remove array variable indirection hack
Replaced by declare -n builtin of Bash 4.3
2020-12-07 00:56:09 +01:00
Nicolas Duchon f069d50d33
Fix tests self cleanup 2020-11-29 02:55:13 +01:00
Nicolas Duchon 1966e52a61
Support for preferred chain 2020-11-29 02:55:11 +01:00
Nicolas Duchon d119a7e5f4
Go template formatting adjustments 2020-11-27 14:47:28 +01:00
Nicolas Duchon e9aa88f091
Add support for Zero SSL API key 2020-11-27 14:47:28 +01:00
Nicolas Duchon f8a24a6dff
Use acme.sh maximum debug level 2020-11-27 14:46:48 +01:00
Nicolas Duchon d36dea9dda
More robust ACME account registration 2020-11-27 14:46:48 +01:00
Nicolas Duchon 5778216fad
Rename LETSENCRYPT_ACME_CA_URI > ACME_CA_URI 2020-11-27 14:46:48 +01:00
Nicolas Duchon 83aa3c9fda
Support for Zero SSL 2020-11-27 14:46:47 +01:00
Nicolas Duchon a90c82a1a7
Add support for elliptic curve 512 bits keys 2020-11-27 14:46:47 +01:00
Nicolas Duchon 8052f04b07
Store and use image version based on git describe 2020-11-27 14:46:47 +01:00
Nicolas Duchon 54e73a994b
Backward compatibility with REUSE_PRIVATE_KEYS 2020-11-27 14:46:46 +01:00
Nicolas Duchon 14a019fedb
Fix private key reuse 2020-11-27 14:46:46 +01:00
Nicolas Duchon e2d05afa25
Better debugging of acme.sh call parameters 2020-11-27 14:46:46 +01:00
Nicolas Duchon cfc274642b
Reload nginx after creating the default cert 2020-11-27 14:46:46 +01:00
Nicolas Duchon 3e4b0a43dd
Linefeed typo 2020-11-27 14:46:45 +01:00
Nicolas Duchon fde553364c
Use acme.sh --register-account in the service loop 2020-11-27 14:46:45 +01:00
Gilles Filippini 195b19d221
Use email-less staging conf for test certificates 2020-11-27 14:46:45 +01:00
Nicolas Duchon aa62af0052
Code styling 2020-11-27 14:46:45 +01:00
Nicolas Duchon 0c165134b9
Update docs and comments 2020-11-27 14:46:45 +01:00
Gilles Filippini 3b1e1ba851
Enable proxied containers ACME email override 2020-11-27 14:46:44 +01:00
Gilles Filippini 3b6d87e8c2
Use default config for empty DEFAULT_EMAIL only 2020-11-27 14:46:44 +01:00
Nicolas Duchon 7cf0a52bce
Refactor update_certs() into two functions 2020-11-27 14:46:44 +01:00
Gilles Filippini 4504e3b4ca
Remove unused function from entrypoint 2020-11-27 14:46:44 +01:00
Gilles Filippini f66c1d55bf
Links should be created on RENEW_SKIP as well 2020-11-27 14:46:43 +01:00
Nicolas Duchon c821d809f6
Change ACME client to acme.sh 2020-11-27 14:44:01 +01:00
Nicolas Duchon 96c9cbf821
Revert "Merge pull request #485 from Greek64/PR"
This feature is not supported in this form by acme.sh

This reverts commit 7dd2cd67e5, reversing
changes made to 6a90d53c97.
2020-11-27 14:44:01 +01:00
Nicolas Duchon fa6745c01b
Make docker-gen wait configurable, lower default
This is supposed to just be a debounce
15s by default was way too long
2020-11-23 03:13:15 +01:00
Remo Gloor 6ede7a7663
Search in all config files for standalone config
Search in all .conf files for the server configuration when a standalone configuration exists.
2020-11-12 18:04:53 +01:00
Maarten de Jong 04d2c32b91
Fix typo
People (like me) will think they should add a dot to the end of their label.
2020-09-25 20:42:33 +02:00
Nicolas Duchon 09518fec98
Grep more than just the domain for standalone conf 2020-07-17 14:24:39 +02:00
Nicolas Duchon 3052654431
Fix issue with trailing dot on domains list 2020-07-04 15:29:37 +02:00
Nicolas Duchon 728a893505
Set auth_request off
#570
2020-05-11 15:47:00 +02:00
Nicolas Duchon 45df81962e
Shell linting 2020-05-11 15:43:07 +02:00
Nicolas Duchon 8a936cc4fe
Add standalone certificate feature
Standalone certificates are generated from a static user provided
configuration file rather than from the dynamicaly generated (from
running containers environment variables) letsencrypt_service_data file.
2020-05-10 19:35:59 +02:00
SilverFire - Dmitry Naumenko 5592543838 Implemented LETSENCRYPT_SINGLE_DOMAIN_CERTS environment variable 2020-04-21 13:29:41 +03:00
Nicolas Duchon e49c2d5213
Shellcheck linting (#641) 2020-03-23 08:20:46 +01:00
Nicolas Duchon 82b088353d
Fix and improve the /app/cert_status utility 2019-12-09 23:01:29 +01:00
Nicolas Duchon cec2482b27
Verify account files existence before perm check (#592)
fix #591
2019-10-17 13:57:48 +02:00