mirror of https://github.com/moepman/acertmgr.git synced 2024-11-14 06:55:29 +01:00

Automated Certificate Manager using ACME

Go to file

David Klaftenegger abba505c9f standalone webserver mode This patch adds the ability to start a simple webserver that is sufficient to solve the ACME challenge.		2016-04-12 11:51:42 +02:00
acertmgr.py	standalone webserver mode	2016-04-12 11:51:42 +02:00
LICENSE	Initial commit	2016-01-10 15:00:43 +01:00
README.md	Improve README	2016-04-12 11:51:16 +02:00

README.md

ACERTMGR

This is an automated certificate manager using ACME/letsencrypt.

Running ACERTMGR

The main file acertmgr.py is intended to be run regularly (e.g. as daily cron job) as root.

Requirements

Python (2.7+ and 3.4+ should work)
python-dateutil
PyYAML
acme_tiny (acme_tiny.py in $PYTHONHOME or $PYTHONPATH or placed next to acertmgr.py)

Configuration

The main configuration is read from /etc/acme/acme.conf, domains for which certificates should be obtained/renewed should be configured in /etc/acme/domains.d/{fqdn}.conf.

All configuration files use yaml syntax.

Example global configuration file:

---

mode: webdir
#mode: standalone
webdir: /var/www/acme-challenge/

defaults:
  format: crt

Example domain configuration file:

---

mail.example.com:
- path: /etc/postfix/ssl/mail.crt
  user: postfix
  group: postfix
  perm: '400'
  notify: '/etc/init.d/postfix reload'
- path: /etc/dovecot/ssl/mail.crt
  user: dovecot
  group: dovecot
  perm: '400'
  notify: '/etc/init.d/dovecot reload'

Security

Please keep the following in mind when using this software:

DO read the source code, since it is intended to be run as root
Make sure that your configuration files are NOT writable by other users - arbitrary commands can be executed after updating certificates