aboutsummaryrefslogtreecommitdiff
path: root/net/acme/Makefile
Commit message (Collapse)AuthorAge
* acme: use the hotplug systemGlen Huang2022-08-16
| | | | Signed-off-by: Glen Huang <heyhgl@gmail.com>
* acme: update to 3.0.1Georgi Valkov2021-10-10
| | | | | | | | | | Default to letsencrypt because the upstream default may change. Passing --staging is no longer needed, since --serever will select a staging server if needed. Signed-off-by: Georgi Valkov <gvalkov@abv.bg> Tested-by: Georgi Valkov <gvalkov@abv.bg> Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: update to 2.9.0Rosen Penev2021-06-25
| | | | | | | | | Switch to AUTORELEASE to avoid bumping PKG_RELEASE all the time. Run shell scripts through shfmt -w -ci -bn -sr -s in order to have a standard style. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: Get listener name from /proc/PID/exe instead of netstat outputToke Høiland-Jørgensen2021-03-26
| | | | | | | | | | It seems the command name output from netstat can be truncated in weird ways, so let's get the binary name from /proc instead and use that for matching which listener we have. Fixes #15071. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: adopt to new behavior of nginxPeter Stadler2021-02-08
| | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* Add option for days until renewalJannis Pinter2020-10-29
| | | | Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
* acme: fix the 'Unknown parameter' problem caused by acme_serverMeano2020-10-19
| | | | Signed-off-by: Meano <meano@foxmail.com>
* acme: Allow custom ACME server directory URLJannis Pinter2020-10-16
| | | | | | The underlying `acme.sh` allows custom ACME server URLs (using `--server`). Adding the necessary field to specify a custom ACME server URL from UCI. Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
* acme: update to 2.8.7Rosen Penev2020-09-12
| | | | | | | Change URL to codeload. It redirects to it anyway. I was getting a 404 error with the original. I couldn't figure it out. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: Make sure we don't handle the same listener twiceToke Høiland-Jørgensen2020-09-09
| | | | | | | | | | If a daemon listens on multiple addresses at once, it'll show up multiple times in get_listeners() which will clobber the config for uhttpd. Fix this by skipping subsequent handlings of the same daemon binary. Fixes #13325. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: fix alignment space vs tabsFlorian Eckert2020-08-05
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* acme: remove cron entry on package removalWren Turkal2020-05-30
| | | | | | | Previously, the cron config was not removed on uninstall. This change fixes that. Signed-off-by: Wren Turkal <wt@penguintechs.org>
* acme: Update acme.sh URL, add support for challenge & domain alises.Will O'Neill2020-05-10
| | | | Signed-off-by: Will O'Neill <0100wrxb@gmail.com>
* acme: Bump acme.sh to v2.8.6Toke Høiland-Jørgensen2020-05-04
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Remove luci-app-acmeToke Høiland-Jørgensen2020-05-04
| | | | | | The Luci app for ACME has been moved to the luci package feed. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: add support for user-provided setup and cleanup scriptsAntti Seppälä2020-04-30
| | | | | | | | | | | Add possibility for user to provide setup and cleanup scripts for additional flexibility. Setup-script takes precedence over the built-in behavior of acme. This helps users with more complex use-cases to utilize acme to update certificates without adding complexity to the provided run.sh script. Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
* acme: Add acl_depends annotations to luci-app-acmeToke Høiland-Jørgensen2020-04-27
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: depends on wget-sslYousong Zhou2020-04-14
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* acme: fix luci-app-acme dependency limitationsFlorian Eckert2020-04-07
| | | | | | This commit fix circle dependency. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* acme: update to 2.8.5Marcos Del Sol Vives2020-02-18
| | | | Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
* acme: Include empty 'dns' config option by defaultToke Høiland-Jørgensen2020-01-23
| | | | | | | This should hopefully prevent issues with that option not showing up in the GUI, like in #11095. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Correctly handle domain state dir for ECC certificatesToke Høiland-Jørgensen2020-01-12
| | | | | | | | | | When issuing an ECC certificate, acme.sh for some reason changes the name of the directory used for the certificate state. Handle this correctly when moving directories and updating config files. Fixes #7941. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Add dependency on luci-compat for luci-app-acmeToke Høiland-Jørgensen2019-11-17
| | | | | | Fixes #10564. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Update to upstream 2.8.3Toke Høiland-Jørgensen2019-10-23
| | | | | | | | | Upstream release message: "Letsencrypt CA recent changed the CDN provider, which resulted in hanging issues. Any downstream package should update. This is important." Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Log acme.sh command invocationToke Høiland-Jørgensen2019-10-23
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: depends on gnu-wgetYousong Zhou2019-09-09
| | | | | | | Fixes openwrt/packages#9456 Ref: https://github.com/openwrt/packages/issues/9456 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* acme: Update to 2.8.1Rosen Penev2019-06-09
| | | | | | | | | Fix license info to use SPDX name. Switched to wget instead of curl to avoid having a dependency on 2 SSL libraries. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* ACME: Remove dependency on luci-lib-ipkgToke Høiland-Jørgensen2019-05-23
| | | | | | | | | Instead, use @jow-'s suggestion of just checking for the presence of the executables to find the installed web servers. Fixes #8529. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* treewide: add missing PKGARCH:=all to non-binary packagesDeng Qingfang2019-03-30
| | | | | | | Packages such as Perl, Lua, shell scripts don't generate binary files. Add PKGARCH:=all to them. Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* ACME: Fix missing quotes in variable comparisonsToke Høiland-Jørgensen2019-03-22
| | | | | | | The variables can be empty if not set in the UCI config. Reported-by: Petr Novák <petrn@me.com> Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Bump package revisionToke Høiland-Jørgensen2019-02-08
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Remove 8192 bits certificate optionToke Høiland-Jørgensen2019-01-08
| | | | | | | This is not supported by letsencrypt, so issuing the certificate will fail. Instead, add 3072 bits as an intermediate option. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Support selecting ECC certificates from LuciToke Høiland-Jørgensen2019-01-08
| | | | | | | | | | | As pointed out by @andersk, acme.sh already supports ECC certificates, and they can be set manually in the uci file, just not in Luci. Fix this by changing the key size selector into a listbox, and adding ECC certs as options. Fixes #7825. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Fix arithmetic syntaxToke Høiland-Jørgensen2018-09-19
| | | | | | Thanks to @jow- for pointing out the mistake. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Fix whitespace and long lines, bump package revToke Høiland-Jørgensen2018-09-19
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: add support for nginx webserverAnsuel Smith2018-09-19
| | | | | | This adds a metapakcge for acme luci ap without uhttpd dependency and adds entities and check to stop handle nginx server and modify the certificate set automatically. Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* acme: Fix bugs from upstream's change to socatToke Høiland-Jørgensen2018-08-22
| | | | | | | | | | The upstream acme.sh package changed to using socat instead of netcat; update the dependencies to reflect this, and pass --listen-v6 when running in standalone mode (since socat only listens on IPv4 by default). Also add a missing cleanup call when certificate issuance fails. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Update to 2.7.9Rosen Penev2018-07-30
| | | | | Switch to codeload. Simplifies the Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: Not all fields should be mandatory in LuciToke Høiland-Jørgensen2018-06-27
| | | | | | Fixes #6370. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Change boot init script logic to invoke startToke Høiland-Jørgensen2018-05-07
| | | | | | | | | | | The new procd config dependency tracking requires the start method to be called even on boot. So add a state file that is checked by the run script to condition the special-case boot run instead of the previous independent call to the run script. Ref: https://github.com/openwrt/luci/pull/1769 Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Add acme-dnsapi packageZhong Jianxin2018-04-19
| | | | Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
* acme: Switch to normal releases + other fixes.Rosen Penev2018-04-15
| | | | | | | | As acme.sh has releases, switch to using those. Update the version accordingly. Also rearranged some stuff in the hope that uscan will start tracking releases instead of git commits. Makefile is more simple as a result. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: update acme to latest gitLucian Cristian2018-03-26
| | | | | | adds V2 support Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* treewide: run "make check FIXUP=1"Etienne Champetier2017-08-29
| | | | | | | | | | fix Makefile chmod (644) replace MD5SUM with HASH add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git (PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now) Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* acme: Make sure postrm script doesn't failToke Høiland-Jørgensen2017-08-16
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* Fix acme-challenge ./well-known check / webroot detection (#4339)Aleksei Nosachev2017-05-10
| | | | | | | | fixes webroot to be defined as _currentRoot='/www' instead of being interpreted as _currentRoot='"/www"' Signed-off-by: Aleksei Nosachev <nos1609@hotmail.com>
* acme: Support running in webroot mode, detect other daemons on port 80Toke Høiland-Jørgensen2017-04-26
| | | | | | | | | | | For configurations where another web server is running on port 80, running acme.sh in standalone mode fails. Try to detect this and refuse to run; and allow the user to configure a webroot directory to use the running webserver for certificate verification. This also updates acme.sh to the latest version. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Fix for curl linked against mbed TLS. (#4254)Daniel H2017-04-12
| | | | | | | Use newest acme.sh release (2.6.8). Remove dependency on ca-certificates and add dependency on ca-bundle. Update environment variable. Signed-off-by: Daniel Halmschlager <da@halms.at>
* acme: Update to v1.4.Toke Høiland-Jørgensen2016-11-28
| | | | | | | | This updates to the latest git version of acme.sh and drops the patch to disable timestamps from the output (since that is now supported upstream). Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Update to v1.3.Toke Høiland-Jørgensen2016-11-25
| | | | | | | | This version handles transitioning from a previous certificate that was issues using the staging server, adds more debug logging, and handles state directories better if issuing fails. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
Powered by cgit, Themed by Ted Yin.