LetsEncrypt with ACME on OpenWRT: Difference between revisions
Created page with "=== ACME === ACME is a Let'sEncrypt Client implementation for OpenWRT. It will request and store SSL / HTTPS Certificates for various purposes. I..." |
mNo edit summary |
||
| Line 1: | Line 1: | ||
=== ACME === | ===ACME=== | ||
ACME is a [[wikipedia:Let's_Encrypt|Let'sEncrypt]] Client implementation for OpenWRT. It will request and store SSL / HTTPS Certificates for various purposes. It can be utilized by Apache, NGinx, UHTTPD, etc. on OpenWRT. | ACME is a [[wikipedia:Let's_Encrypt|Let'sEncrypt]] Client implementation for OpenWRT. It will request and store SSL / HTTPS Certificates for various purposes. It can be utilized by Apache, NGinx, UHTTPD, etc. on OpenWRT. | ||
=== Installation === | ===Installation=== | ||
opkg update | opkg update | ||
opkg install acme acme-dnsapi luci-app-acme | opkg install acme acme-dnsapi luci-app-acme | ||
=== Functionality === | ===Functionality=== | ||
Based on the script files, it appears the "ACME Service" can be triggered by CRON or a Start or Restart of the service. | Based on the script files, it appears the "ACME Service" can be triggered by CRON or a Start or Restart of the service. | ||
=== Usage Via Command Line === | ===Usage Via Command Line=== | ||
==== Quick Notes ==== | ====Quick Notes==== | ||
--cert-file: Path and File Name where certificate '''''will be copied to''''' (IE, the 'originals' are stored elsewhere) | --cert-file: Path and File Name where certificate '''''will be copied to''''' (IE, the 'originals' are stored elsewhere) | ||
| Line 31: | Line 31: | ||
Also see contents of acme.sh --help below. | Also see contents of acme.sh --help below. | ||
=== Files === | ==== Examples ==== | ||
* /usr/lib/acme/acme.sh --revoke --domain WhatEverDomainName.xyz | |||
* /usr/lib/acme/acme.sh --list | |||
* /usr/lib/acme/acme.sh --issue --webroot /usr/share/apache2/htdocs --domain WhatEverDomainName.xyz --home /etc/acme --cert-home /etc/acme/certs --config-home /etc/acme/config | |||
===Files=== | |||
/etc/config/acme: OpenWRT configuration file that receives / sends information from LuCI GUI<syntaxhighlight lang="text"> | /etc/config/acme: OpenWRT configuration file that receives / sends information from LuCI GUI<syntaxhighlight lang="text"> | ||
config acme | config acme | ||
| Line 198: | Line 204: | ||
--notify-hook [hookname] Set the notify hook | --notify-hook [hookname] Set the notify hook | ||
</syntaxhighlight>/usr/lib/acme/run-acme: According to the notes in the file, it's a "wrapper" for the acme.sh script. | </syntaxhighlight>/usr/lib/acme/run-acme: According to the notes in the file, it's a "wrapper" for the acme.sh script. | ||
<br /> | <br /> | ||