• View
• Edit
• History
• Print

Acme Client

1- doas cp /etc/examples/acme-client.conf /etc/acme-client.conf
2- doas nano /etc/acme-client.conf

authority letsencrypt {

	api url "https://acme-v02.api.letsencrypt.org/directory"
	account key "/etc/acme/letsencrypt-privkey.pem"

}

authority letsencrypt-staging {

	api url "https://acme-staging-v02.api.letsencrypt.org/directory"
	account key "/etc/acme/letsencrypt-staging-privkey.pem"

}

authority buypass {

	api url "https://api.buypass.com/acme/directory"
	account key "/etc/acme/buypass-privkey.pem"
	contact "support@domain-name"

}

authority buypass-test {

	api url "https://api.test4.buypass.no/acme/directory"
	account key "/etc/acme/buypass-test-privkey.pem"
	contact "support@domain-name"

}

domain domain-name {

        alternative names { alternative domain-name }
        domain key "/etc/ssl/private/domain-name.key"
        domain full chain certificate "/etc/ssl/domain-name.fullchain.pem"
        sign with letsencrypt

}

3- Requesting Certificates:
doas mv /etc/ssl/almajd.host.ircnow.org.fullchain.pem /etc/ssl/domain-name.fullchain.pem.bak
doas mv /etc/ssl/private/almajd.host.ircnow.org.key /etc/ssl/private/domain-name.key.bak

doas acme-client -Fv domain-name

doas ln -s /etc/ssl/domain-name.fullchain.pem /etc/ssl/domain-name:443.crt
doas ln -s /etc/ssl/private/domain-name.org.key /etc/ssl/private/domain-name:443.key

<bogani> can u show us ur acme-client, type doas ls -l /etc/ssl/
<jrmu> Almajd: $ doas ls -lhaR /etc/ssl | nc paste.ircnow.org 7777