mirror of
https://github.com/go-acme/lego.git
synced 2024-12-11 21:22:39 +02:00
42941ccea6
- Packages - Isolate code used by the CLI into the package `cmd` - (experimental) Add e2e tests for HTTP01, TLS-ALPN-01 and DNS-01, use [Pebble](https://github.com/letsencrypt/pebble) and [challtestsrv](https://github.com/letsencrypt/boulder/tree/master/test/challtestsrv) - Support non-ascii domain name (punnycode) - Check all challenges in a predictable order - No more global exported variables - Archive revoked certificates - Fixes revocation for subdomains and non-ascii domains - Disable pending authorizations - use pointer for RemoteError/ProblemDetails - Poll authz URL instead of challenge URL - The ability for a DNS provider to solve the challenge sequentially - Check all nameservers in a predictable order - Option to disable the complete propagation Requirement - CLI, support for renew with CSR - CLI, add SAN on renew - Add command to list certificates. - Logs every iteration of waiting for the propagation - update DNSimple client - update github.com/miekg/dns
70 lines
1.8 KiB
Go
70 lines
1.8 KiB
Go
package api
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"errors"
|
|
"fmt"
|
|
|
|
"github.com/xenolf/lego/acme"
|
|
)
|
|
|
|
type AccountService service
|
|
|
|
// New Creates a new account.
|
|
func (a *AccountService) New(req acme.Account) (acme.ExtendedAccount, error) {
|
|
var account acme.Account
|
|
resp, err := a.core.post(a.core.GetDirectory().NewAccountURL, req, &account)
|
|
location := getLocation(resp)
|
|
|
|
if len(location) > 0 {
|
|
a.core.jws.SetKid(location)
|
|
}
|
|
|
|
if err != nil {
|
|
return acme.ExtendedAccount{Location: location}, err
|
|
}
|
|
|
|
return acme.ExtendedAccount{Account: account, Location: location}, nil
|
|
}
|
|
|
|
// NewEAB Creates a new account with an External Account Binding.
|
|
func (a *AccountService) NewEAB(accMsg acme.Account, kid string, hmacEncoded string) (acme.ExtendedAccount, error) {
|
|
hmac, err := base64.RawURLEncoding.DecodeString(hmacEncoded)
|
|
if err != nil {
|
|
return acme.ExtendedAccount{}, fmt.Errorf("acme: could not decode hmac key: %v", err)
|
|
}
|
|
|
|
eabJWS, err := a.core.signEABContent(a.core.GetDirectory().NewAccountURL, kid, hmac)
|
|
if err != nil {
|
|
return acme.ExtendedAccount{}, fmt.Errorf("acme: error signing eab content: %v", err)
|
|
}
|
|
accMsg.ExternalAccountBinding = eabJWS
|
|
|
|
return a.New(accMsg)
|
|
}
|
|
|
|
// Get Retrieves an account.
|
|
func (a *AccountService) Get(accountURL string) (acme.Account, error) {
|
|
if len(accountURL) == 0 {
|
|
return acme.Account{}, errors.New("account[get]: empty URL")
|
|
}
|
|
|
|
var account acme.Account
|
|
_, err := a.core.post(accountURL, acme.Account{}, &account)
|
|
if err != nil {
|
|
return acme.Account{}, err
|
|
}
|
|
return account, nil
|
|
}
|
|
|
|
// Deactivate Deactivates an account.
|
|
func (a *AccountService) Deactivate(accountURL string) error {
|
|
if len(accountURL) == 0 {
|
|
return errors.New("account[deactivate]: empty URL")
|
|
}
|
|
|
|
req := acme.Account{Status: acme.StatusDeactivated}
|
|
_, err := a.core.post(accountURL, req, nil)
|
|
return err
|
|
}
|