acmetool | : lock : acmetool , an automatic certificate acquisition | TLS library
kandi X-RAY | acmetool Summary
kandi X-RAY | acmetool Summary
acmetool is an easy-to-use command line tool for automatically acquiring certificates from acme servers (such as let's encrypt). designed to flexibly integrate into your webserver setup to enable automatic verification. unlike the official let's encrypt client, this doesn't modify your web server configuration. :white_check_mark: zero-downtime autorenewal :white_check_mark: supports any webserver :white_check_mark: fully automatable :white_check_mark: single-file dependency-free binary :white_check_mark: idempotent :white_check_mark: fast setup. you can perform verifications using port 80 or 443 (if you don't yet have a server running on one of them); via webroot; by configuring your webserver to proxy requests for /.well-known/acme-challenge/ to a special port (402) which acmetool can listen on; or by configuring your webserver not to listen on port 80, and instead running acmetool's built in https redirector (and challenge responder) on port 80. this is useful if all you want to do with port 80 is redirect people to port 443. you can run acmetool on a cron job to renew certificates automatically (acmetool --batch). the preferred certificate for a given hostname is always at /var/lib/acme/live/hostname/{cert,chain,fullchain,privkey}.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of acmetool
acmetool Key Features
acmetool Examples and Code Snippets
Community Discussions
Trending Discussions on acmetool
QUESTION
With this configuration, when I call "my.domainname.com/unity/index.html
" manually, it works and it finds all the other files.
When I try "my.domainname.com/unity/
" it doesnt go to the default index.html file and returns a 403. What am I missing?
(most important are the latest lines, configuring when user wants to access to /unity
path)
ANSWER
Answered 2018-Sep-16 at 09:18With try_files
the index
feature is triggered by a file term with a trailing /
. See this document for details.
I couldn't get it working with your named capture though, but if you knock the "/unity" term off the end of the root
statement, you can use the conventional approach.
For example:
QUESTION
I wanted to setup HAProxy for two servers - one with passthroug one with termination. I was able to do it with no previous experience of HAProxy, but I am unable to make HTTPS redirect for the terminating one - I get 502. Here is the config:
...ANSWER
Answered 2018-Feb-27 at 17:48I was able to figure it out with some help from the HAProxy community.
Here is the final setup with updated names to better reflect the logic behind each one:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install acmetool
The quickstart subcommand is a recommended wizard which guides you through the setup of ACME on your system. The want subcommand states that you want a certificate for the given hostnames. (If you want separate certificates for each of the hostnames, run the want subcommand separately for each hostname.). The default subcommand, reconcile, is like "make" and makes sure all desired hostnames are satisfied by valid certificates which aren't soon to expire. want calls reconcile automatically. If you run acmetool reconcile on a cronjob to facilitate automatic renewal, pass --batch to ensure it doesn't attempt to interact with a terminal. You can increase logging severity for debugging purposes by passing --xlog.severity=debug.
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page