go/lego
go/lego
1
0
Fork 0
mirror of https://github.com/go-acme/lego.git synced 2024-11-24 16:53:52 +02:00
Code Issues Releases Activity
Let's Encrypt/ACME client and library written in Go https://go-acme.github.io/lego/
28 Commits 5 Branches 86 Tags 33 MiB
Go 99.9%
6b6876d15a
Go to file
Matt Holt 6b6876d15a Basic tests for crypto wrapper functions 
Even though the std lib does the heavy lifting, this should verify (somewhat) that the helper functions are working.

Better tests would involve replacing crypto/rand.Reader with a non-random Reader then comparing the contents to make sure the proper std lib crypto functions were called and their values returned.
2015-06-13 09:53:17 -06:00
acme Basic tests for crypto wrapper functions 2015-06-13 09:53:17 -06:00
.gitignore Remove global paths and default to CWD/.lego for storage. Overridable through --path. 2015-06-12 23:34:49 +02:00
.travis.yml Create .travis.yml 2015-06-13 17:36:15 +02:00
account.go Save accounts using indented JSON 2015-06-08 23:52:41 +02:00
cli_handlers.go Flesh out run cli_handler for error handling and saving certificates 2015-06-13 03:56:34 +02:00
cli.go Allow the user to override the challenge port. Enables running as non-root. 2015-06-13 00:16:49 +02:00
configuration.go Flesh out run cli_handler for error handling and saving certificates 2015-06-13 03:56:34 +02:00
crypto.go Base implementation with registration support 2015-06-08 02:36:07 +02:00
LICENSE Add LICENSE 2015-06-13 12:59:39 +02:00
README.md Create README.md 2015-06-13 04:45:04 +02:00

README.md

lego

Let's Encrypt client and library in go!

This is a work in progress. Please do NOT run this on a production server.

####Current Status The code in this repository is currently quite raw. You are currently able to register an account with the ACME server as well as request certificates through the CLI.

Please keep in mind that CLI switches and APIs are still subject to change.

When using the standard --path option, all certificates and account configurations are saved to a folder .lego in the current working directory.

####Sudo I tried to not need sudo apart from challenges where binding to a privileged port is necessary. To run the CLI without sudo, you have two options:

  • Use setcap 'cap_net_bind_service=+ep' /path/to/program
  • Pass the --port option and specify a custom port to bind to. In this case you have to forward port 443 to this custom port.

Usage

NAME:
   lego - Let's encrypt client to go!

USAGE:
   lego [global options] command [command options] [arguments...]

VERSION:
   0.0.1

COMMANDS:
   run		Create and install a certificate
   auth		Create a certificate
   install	Install a certificate
   revoke	Revoke a certificate
   rollback	Rollback a certificate
   help, h	Shows a list of commands or help for one command
   
GLOBAL OPTIONS:
   --domains, -d [--domains option --domains option]					Add domains to the process
   --server, -s "https://www.letsencrypt-demo.org/acme/new-reg"				CA hostname (and optionally :port). The server certificate must be trusted in order to avoid further modifications to the client.
   --email, -m 										Email used for registration and recovery contact.
   --rsa-key-size, -B "2048"								Size of the RSA key.
   --no-confirm										Turn off confirmation screens.
   --agree-tos, -e									Skip the end user license agreement screen.
   --path "/Volumes/Data/Users/azhwkd/Projects/go/src/github.com/xenolf/lego/.lego"	Directory to use for storing the data
   --port 										Challenges will use this port to listen on. Please make sure to forward port 443 to this port on your machine. Otherwise use setcap on the binary
   --help, -h										show help
   --version, -v									print the version