aboutsummaryrefslogtreecommitdiff
path: root/net/acme
Commit message (Collapse)AuthorAge
* acme: use the hotplug systemGlen Huang2022-08-16
| | | | Signed-off-by: Glen Huang <heyhgl@gmail.com>
* acme: switch from iptables to nftToke Høiland-Jørgensen2022-05-20
| | | | | | | | Use nft instead of iptables to open port 80 in the firewall when getting a cert. Since nft doesn't allow deleting a rule by its contents, capture and save the handle when creating the rule, and use that to delete. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: update to 3.0.1Georgi Valkov2021-10-10
| | | | | | | | | | Default to letsencrypt because the upstream default may change. Passing --staging is no longer needed, since --serever will select a staging server if needed. Signed-off-by: Georgi Valkov <gvalkov@abv.bg> Tested-by: Georgi Valkov <gvalkov@abv.bg> Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Fix uhttpd restart to load new certificatesDennis Schüsselbauer2021-09-01
| | | | | | Fixes issue #16256 Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>
* acme: add haproxy supportWakatatsu Ryou2021-09-01
| | | | Signed-off-by: Wakatatsu Ryou <lialosiu@gmail.com>
* acme: add haproxy supportWakatatsu Ryou2021-09-01
| | | | Signed-off-by: Wakatatsu Ryou <lialosiu@gmail.com>
* acme: run through shellcheckRosen Penev2021-06-25
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: update to 2.9.0Rosen Penev2021-06-25
| | | | | | | | | Switch to AUTORELEASE to avoid bumping PKG_RELEASE all the time. Run shell scripts through shfmt -w -ci -bn -sr -s in order to have a standard style. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: Get listener name from /proc/PID/exe instead of netstat outputToke Høiland-Jørgensen2021-03-26
| | | | | | | | | | It seems the command name output from netstat can be truncated in weird ways, so let's get the binary name from /proc instead and use that for matching which listener we have. Fixes #15071. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: adopt to new behavior of nginxPeter Stadler2021-02-08
| | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* Add option for days until renewalJannis Pinter2020-10-29
| | | | Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
* acme: fix the 'Unknown parameter' problem caused by acme_serverMeano2020-10-19
| | | | Signed-off-by: Meano <meano@foxmail.com>
* acme: Allow custom ACME server directory URLJannis Pinter2020-10-16
| | | | | | The underlying `acme.sh` allows custom ACME server URLs (using `--server`). Adding the necessary field to specify a custom ACME server URL from UCI. Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
* acme: update to 2.8.7Rosen Penev2020-09-12
| | | | | | | Change URL to codeload. It redirects to it anyway. I was getting a 404 error with the original. I couldn't figure it out. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* acme: Make sure we don't handle the same listener twiceToke Høiland-Jørgensen2020-09-09
| | | | | | | | | | If a daemon listens on multiple addresses at once, it'll show up multiple times in get_listeners() which will clobber the config for uhttpd. Fix this by skipping subsequent handlings of the same daemon binary. Fixes #13325. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: fix alignment space vs tabsFlorian Eckert2020-08-05
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* acme: remove cron entry on package removalWren Turkal2020-05-30
| | | | | | | Previously, the cron config was not removed on uninstall. This change fixes that. Signed-off-by: Wren Turkal <wt@penguintechs.org>
* acme: Update acme.sh URL, add support for challenge & domain alises.Will O'Neill2020-05-10
| | | | Signed-off-by: Will O'Neill <0100wrxb@gmail.com>
* acme: Bump acme.sh to v2.8.6Toke Høiland-Jørgensen2020-05-04
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Remove luci-app-acmeToke Høiland-Jørgensen2020-05-04
| | | | | | The Luci app for ACME has been moved to the luci package feed. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: add support for user-provided setup and cleanup scriptsAntti Seppälä2020-04-30
| | | | | | | | | | | Add possibility for user to provide setup and cleanup scripts for additional flexibility. Setup-script takes precedence over the built-in behavior of acme. This helps users with more complex use-cases to utilize acme to update certificates without adding complexity to the provided run.sh script. Signed-off-by: Antti Seppälä <a.seppala@gmail.com>
* Merge pull request #11968 from yangfl/masterToke Høiland-Jørgensen2020-04-29
|\ | | | | acme: fix some errors
| * acme: Bump release versionDavid Yang2020-04-27
| | | | | | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
| * acme: Handle ecc cert correctlyDavid Yang2020-04-27
| | | | | | | | | | | | | | Error was: The domain 'example.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert. Signed-off-by: David Yang <mmyangfl@gmail.com>
| * acme: Handle log message correctlyDavid Yang2020-04-27
| | | | | | | | | | | | | | Error was: logger: unrecognized option: renew Signed-off-by: David Yang <mmyangfl@gmail.com>
* | acme: Add acl_depends annotations to luci-app-acmeToke Høiland-Jørgensen2020-04-27
|/ | | | Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: depends on wget-sslYousong Zhou2020-04-14
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* acme: fix luci-app-acme dependency limitationsFlorian Eckert2020-04-07
| | | | | | This commit fix circle dependency. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* acme: update to 2.8.5Marcos Del Sol Vives2020-02-18
| | | | Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
* acme: Include empty 'dns' config option by defaultToke Høiland-Jørgensen2020-01-23
| | | | | | | This should hopefully prevent issues with that option not showing up in the GUI, like in #11095. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Correctly handle domain state dir for ECC certificatesToke Høiland-Jørgensen2020-01-12
| | | | | | | | | | When issuing an ECC certificate, acme.sh for some reason changes the name of the directory used for the certificate state. Handle this correctly when moving directories and updating config files. Fixes #7941. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Add dependency on luci-compat for luci-app-acmeToke Høiland-Jørgensen2019-11-17
| | | | | | Fixes #10564. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Update to upstream 2.8.3Toke Høiland-Jørgensen2019-10-23
| | | | | | | | | Upstream release message: "Letsencrypt CA recent changed the CDN provider, which resulted in hanging issues. Any downstream package should update. This is important." Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Log acme.sh command invocationToke Høiland-Jørgensen2019-10-23
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: depends on gnu-wgetYousong Zhou2019-09-09
| | | | | | | Fixes openwrt/packages#9456 Ref: https://github.com/openwrt/packages/issues/9456 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* acme: Update to 2.8.1Rosen Penev2019-06-09
| | | | | | | | | Fix license info to use SPDX name. Switched to wget instead of curl to avoid having a dependency on 2 SSL libraries. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* ACME: Remove dependency on luci-lib-ipkgToke Høiland-Jørgensen2019-05-23
| | | | | | | | | Instead, use @jow-'s suggestion of just checking for the presence of the executables to find the installed web servers. Fixes #8529. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* treewide: add missing PKGARCH:=all to non-binary packagesDeng Qingfang2019-03-30
| | | | | | | Packages such as Perl, Lua, shell scripts don't generate binary files. Add PKGARCH:=all to them. Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* ACME: Fix missing quotes in variable comparisonsToke Høiland-Jørgensen2019-03-22
| | | | | | | The variables can be empty if not set in the UCI config. Reported-by: Petr Novák <petrn@me.com> Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Bump package revisionToke Høiland-Jørgensen2019-02-08
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Fix loading credentialsAdrien DAURIAT2019-02-08
| | | | | | | | Move loading credential function before cert renewal call as credentials might be needed for some renewal operations ( ex: DNS ) Signed-off-by: Adrien DAURIAT <16813527+dauriata@users.noreply.github.com> [toke@toke.dk: Port to master branch] Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* net/acme: commit uhttpd configuration if update_httpd setAlexey I. Froloff2019-02-07
| | | | | | uhttpd configuration should be commited when update_uhttpd set. Signed-off-by: Alexey I. Froloff <raorn@raorn.name>
* net/acme: issue_cert should always call post_checks on exitAlexey I. Froloff2019-02-07
| | | | | | | | | | issue_cert fuction may return without calling post_checks, which leaves port 80 open and uhttpd configuration is not restored is listen_http was set. Always call post_checks when returning from issue_cert. Signed-off-by: Alexey I. Froloff <raorn@raorn.name>
* acme: Remove 8192 bits certificate optionToke Høiland-Jørgensen2019-01-08
| | | | | | | This is not supported by letsencrypt, so issuing the certificate will fail. Instead, add 3072 bits as an intermediate option. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Support selecting ECC certificates from LuciToke Høiland-Jørgensen2019-01-08
| | | | | | | | | | | As pointed out by @andersk, acme.sh already supports ECC certificates, and they can be set manually in the uci file, just not in Luci. Fix this by changing the key size selector into a listbox, and adding ECC certs as options. Fixes #7825. Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* acme: Fix arithmetic syntaxToke Høiland-Jørgensen2018-09-19
| | | | | | Thanks to @jow- for pointing out the mistake. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Fix whitespace and long lines, bump package revToke Høiland-Jørgensen2018-09-19
| | | | Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: add support for nginx webserverAnsuel Smith2018-09-19
| | | | | | This adds a metapakcge for acme luci ap without uhttpd dependency and adds entities and check to stop handle nginx server and modify the certificate set automatically. Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* acme: Fix bugs from upstream's change to socatToke Høiland-Jørgensen2018-08-22
| | | | | | | | | | The upstream acme.sh package changed to using socat instead of netcat; update the dependencies to reflect this, and pass --listen-v6 when running in standalone mode (since socat only listens on IPv4 by default). Also add a missing cleanup call when certificate issuance fails. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* acme: Update to 2.7.9Rosen Penev2018-07-30
| | | | | Switch to codeload. Simplifies the Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com>
Powered by cgit, Themed by Ted Yin.