ad07400004
Update hook wrapper path
8 years ago
d6a984d862
Update well-known directory
8 years ago
b9105310d9
Fix migrating cert path
8 years ago
ded0c3eb5e
Adapt for the rename to dehydrated
8 years ago
fe296869b3
Spec file update
8 years ago
789d868e89
Fix deploy hook on sme8
...
There was two problems: the manual expand-template for the pem file was wrong, and the smeserver-letsencrypt-client rpm provided the /etc/e-smith/event/ssl-update event. So the test for it not existing was always false. But this event did nothing except expand a single config template, no ssl cert was being updated
8 years ago
71628a7621
Spec file update
8 years ago
39d2e30398
Fix cron syntax for random sleep command
8 years ago
d92beb01b1
Spec file update
8 years ago
73a2dbcaf8
Always add letsencrypt alias
...
so if a domain has letsencrypt support disabled, but has at least one hostname attached to this domain with letsencrypt enabled, it can validate its challenge
8 years ago
2417beb270
Don't force Letsencrypt support on primary domain
8 years ago
8a58ddb102
Add a wrapper script for letsencrypt.sh
...
This wrapper support a new ProxyPassACMEChallengesDisableOnRenew prop which allows disabling ACME challenge proxypass only during the renewal
8 years ago
dc0f2ff539
Spec file update
8 years ago
e646cd1705
Set DOMAINS_TXT in config
8 years ago
a9387cd1bd
Rename config.sh to config
8 years ago
dbc8bcd902
Define %clean before %files
...
So the epel macro are not used
8 years ago
8604070614
Spec file update
8 years ago
d772e84feb
Use chain.pem instead of fullchain.pem
...
As some older OpenSSL (like the one in Debian 7) don't like the final cert being in the intermediate chain
8 years ago
5959177ccb
Spec file update
8 years ago
5467cea2c2
Fix cron template
8 years ago
38e228cb49
Typo in templates name
8 years ago
ddb4abb9d4
Turn RevokeOldCertificates on by default
8 years ago
708789e893
Expand cron.daily/letsencrypt instead of crontab
8 years ago
a95bccf47f
Make Renewal configurable
8 years ago
bae49f049e
Revoke old certs in a separated script
...
We cannot call letsencrypt.sh from a hook script, as there's a lock file
8 years ago
0540516807
Spec file update
8 years ago
bae34ca9f1
Better AltName selection and deduplication
8 years ago
4fb5dd3018
Rename le-update to letsencrypt-update
8 years ago
752f3d3a41
Add a Uri prop to choose between production or staging CA
...
And default to staging
8 years ago
b088baa65d
String must be quoted
8 years ago
6651e5dcc6
Cron syntax was wrong
8 years ago
9163bbd3c3
Send stdout and stderr in logs, but print stderr also
...
So a failed cron job will be emailed to the admin
8 years ago
233c6e4945
Add some sanity check to args passed to hook handler
8 years ago
eedcb47c0b
Call le_hooks.sh
8 years ago
3a24f881ba
Adapt hook scripts
8 years ago
c926162fc3
Rename hook script
...
SO it's easier to order with others
8 years ago
fa5b40587b
Move hook script to /etc/letsencrypt.sh/hooks_deploy_cert.d
...
And also make it working on older SME (without ssl-update event)
8 years ago
692a33a1f1
Spec file update
8 years ago
88a7d5fda0
Possibility to explicitely disable Self hosts
8 years ago
ebdeabf799
Log cron jobs
8 years ago
89ec028659
Don't exec letsencrypt.sh in le-update
8 years ago
7a46806df6
No need to specify hook on cmd line
8 years ago
88890c22fd
Change challenge directory
8 years ago
be96984d48
Update cert during le-update
8 years ago
04664ce9cc
Call with the hook and run in background during events
8 years ago
a445ea1d08
Fix hook script and revoke old certificates
8 years ago
ae24a11695
Explicitely set patch to the hook script
8 years ago
cf96333f22
Make sure main domain is the first listed
8 years ago
051e021fdd
First commit
8 years ago
Daniel Berteaud