Commit Graph

1019 Commits

Author SHA1 Message Date
neil 90b65c6618 fix https://github.com/acmesh-official/acme.sh/issues/3898
https://github.com/acmesh-official/acme.sh/issues/3898
2022-01-27 18:00:44 +08:00
neil 188274277a fix https://github.com/acmesh-official/acme.sh/issues/3883 2022-01-11 17:16:51 +08:00
neil e07795e8f0 fix https://github.com/acmesh-official/acme.sh/issues/3883 2022-01-11 16:56:19 +08:00
neil 856e77053e Merge branch '3870' into dev 2022-01-10 16:29:44 +08:00
neil e67d26caeb fix https://github.com/acmesh-official/acme.sh/issues/3845#issuecomment-999367478 2022-01-08 19:58:49 +08:00
neil 86c3fa0df0 remove retry for get and post 2022-01-08 19:51:04 +08:00
neil d43b587d17 fix https://github.com/acmesh-official/acme.sh/issues/3870 2022-01-07 22:06:18 +08:00
Joel Pearson 0727f7054b Allow optional "NEW" in CSR header and footer
When generating a CSR in Windows it seems to create a CSR header that looks like "-----BEGIN NEW CERTIFICATE REQUEST-----", but the addition of "NEW" breaks the parsing of the CSR. Making "NEW " optional fixes the problem.

Apparently certbot is tolerant of both forms, see: https://community.letsencrypt.org/t/error-parsing-certificate-request-resolved/40039/6 for more information.
2022-01-06 17:41:42 +08:00
neilpang c39e6c4423 add `--info` command to show the global configs or domain configs.
https://github.com/acmesh-official/acme.sh/issues/2444
2022-01-06 17:41:42 +08:00
neilpang 1566656af3 fix https://github.com/acmesh-official/acme.sh/issues/3869 2022-01-06 17:41:42 +08:00
neilpang 737eba57bd send notifications for renew command
https://github.com/acmesh-official/acme.sh/issues/3869#issuecomment-1003546762
2022-01-06 17:41:41 +08:00
neilpang 4f386663e7 fix for OpenBSD7
https://github.com/acmesh-official/acme.sh/issues/3833
2022-01-06 17:41:40 +08:00
neilpang 18e4d270d9 fix https://github.com/acmesh-official/acme.sh/issues/3806 2021-11-13 15:23:32 +08:00
neil f63409eed9 fix https://github.com/acmesh-official/acme.sh/issues/1559 2021-11-06 12:27:50 +08:00
neil b8bfb5a56c fix format 2021-11-06 11:28:11 +08:00
neil 3f58823430 fix ip cert 2021-11-06 11:26:06 +08:00
neil e488220bfc fix for solaris 2021-11-06 11:16:41 +08:00
neil e6e0771496 fix for ip cert alpn mode 2021-11-06 11:16:40 +08:00
neil fe77d43fa0 fix _deactivate for ip cert 2021-11-06 11:16:40 +08:00
neil 6ae8d10132 support ip cert: rfc https://tools.ietf.org/html/rfc8738 2021-11-06 11:15:10 +08:00
neil 7d249b6d3b start 3.0.2 2021-11-06 09:52:21 +08:00
neilpang 38a067e203 fix https://github.com/acmesh-official/acme.sh/issues/3752 2021-10-12 20:55:11 +08:00
Phil Krylov 40e8c5e2b0
Don't use global variable as local in recursion context
```nginx
include conf.d/*;
include sites-enabled/*;
```
In this situation, after the first recursive `_checkConf` invocation 4 lines below, `$_c_file` does not contain what you expect anymore, and the second lookup checks for `conf.d/sites-enabled/*` which is obviously wrong.
2021-10-08 18:24:21 +02:00
neil 84fe6654cc fix for https://github.com/acmesh-official/acme.sh/issues/3717 2021-10-03 20:59:55 +08:00
neil d4e1899747 support "--set-default-chain", fix https://github.com/acmesh-official/acme.sh/issues/3717 2021-10-03 19:02:45 +08:00
neil b335840f97
Merge pull request #3657 from Sp1l/extend_pre_hook
Make domain names available to pre hook
2021-08-22 11:01:02 +08:00
neilpang 6bdf689d0f fix https://github.com/acmesh-official/acme.sh/issues/3660 2021-08-15 08:52:55 +08:00
Bernard Spil e164362069 Make domain names available to pre hook
Export Le_Domains and Le_Alt so your pre-hook script can run additional checks.

Allows running checks on the domain names before the first call to the ACME API. Thereby not counting against the rate-limit when an issue is going to be problematic.

Supersedes:	#3288
2021-08-10 12:36:29 +02:00
neilpang ccfd907914 fix https://github.com/acmesh-official/acme.sh/issues/3649 2021-08-07 21:06:05 +08:00
neilpang 5a44e63cad fix nginx mode
https://github.com/acmesh-official/acme.sh/issues/3648#issuecomment-894045613
2021-08-06 21:22:10 +08:00
neilpang 06580bf0e4 fix https://github.com/acmesh-official/acme.sh/issues/1914#issuecomment-893188476 2021-08-05 20:12:42 +08:00
jonwltn 6b97dc6734
Minor output formatting changes. 2021-08-04 10:44:48 -07:00
neilpang 2b5e2d4760 fix nginx mode 2021-08-01 15:44:14 +08:00
neilpang 89abad7980 fix https://github.com/acmesh-official/acme.sh/issues/3635 2021-08-01 13:11:52 +08:00
neilpang 5cc1d9521c fix https://github.com/acmesh-official/acme.sh/issues/3624#issuecomment-887689325 2021-07-28 22:14:54 +08:00
neil 655e34b166 minor, clean links for renewal 2021-07-24 16:23:43 +08:00
neilpang 103810ce20 add info 2021-07-20 21:05:17 +08:00
neil d70b759cb9 format 2021-07-15 22:47:20 +08:00
neil ae3dda0f8f add retry for get() and post() 2021-07-15 22:21:32 +08:00
neil dcc50093bb fix https://github.com/acmesh-official/acme.sh/issues/3600 2021-07-12 21:46:08 +08:00
jonwltn a0c5d17539
Fix the URL for checking DNSPod availability. 2021-07-02 09:23:45 -07:00
neilpang 2d07185300 use letsencrypt server to renew certs if no server was saved. 2021-06-28 21:16:32 +08:00
neilpang e0def66959 fix for compatiblity 2021-06-27 11:29:51 +08:00
neilpang fb73dceab0 fix format 2021-06-25 22:46:55 +08:00
neilpang 13fd83e0ba fix revoke 2021-06-25 22:44:23 +08:00
neilpang 13ab98440c fix initapi 2021-06-25 22:23:17 +08:00
neilpang 1752004301 fix deactivate 2021-06-25 22:16:16 +08:00
neilpang 536a5f7cff fix deactivate 2021-06-25 21:59:38 +08:00
neilpang 29fe1c86da fix initapi 2021-06-24 23:21:10 +08:00
neilpang 9daeae1695 remove unnecessary check 2021-06-24 20:45:15 +08:00
neilpang 014e016058 add retry for init api 2021-06-24 20:35:49 +08:00
neilpang c7285967d6 fix for list short name 2021-06-22 20:39:00 +08:00
neilpang c0ae44a41b fix format 2021-06-21 22:59:14 +08:00
neilpang 593e8e1f63 move ca key path 2021-06-21 22:47:22 +08:00
neilpang 707cf35f0a fix format 2021-06-21 22:29:14 +08:00
neilpang 30f11d0e16 typo 2021-06-21 21:41:56 +08:00
neilpang 53d6ab6c23 support SSL.com 2021-06-21 21:31:00 +08:00
neilpang 280e44304a fix for compatibility to sslcom 2021-06-21 20:11:15 +08:00
neilpang 8ae08b29e4 fix for solaris 2021-06-13 21:37:26 +08:00
neilpang d0b514890a change default ca to zerossl 2021-06-13 14:29:26 +08:00
neil 43cb230f19
Merge pull request #3535 from sparunakian/dev
Fix typo (#3521)
2021-06-02 23:06:36 +08:00
neil fd6a59202d start 3.0.0 2021-06-02 23:06:12 +08:00
Stéphane Parunakian e353f66eaa Fix typo 2021-06-02 16:06:08 +02:00
neil f627a02886 add error message 2021-06-01 21:24:37 +08:00
neil 5f9daa6640 check initAPI error 2021-06-01 21:23:00 +08:00
neil 7710a33b6c fix format 2021-05-22 23:48:39 +08:00
neil af3ea2d4fd remove ACME v1 support 2021-05-22 23:45:50 +08:00
neilpang aede5c486b fix https://github.com/acmesh-official/acme.sh/issues/3504
check invalid status first.
2021-05-07 22:02:40 +08:00
neilpang aa59c46c4c fix https://github.com/acmesh-official/acme.sh/issues/3504 2021-05-07 21:49:47 +08:00
neilpang 0881cf1379 start 2.9.0 2021-05-04 13:32:59 +08:00
neil 290beb90a7 minor 2021-05-03 17:14:54 +08:00
neil 0a4ef17135 fix nginx relative path issue:
https://github.com/acmesh-official/acme.sh/issues/1743
https://github.com/acmesh-official/acme.sh/issues/1914
2021-05-03 17:11:02 +08:00
neil e0c32ce700 minor 2021-05-03 16:42:09 +08:00
neil e65144a105 fix https://github.com/acmesh-official/acme.sh/issues/3487
suppor Ali doh and dnspod doh.
2021-05-03 16:37:13 +08:00
neil 25a8240d12 fix https://github.com/acmesh-official/acme.sh/issues/3421 2021-05-03 15:52:56 +08:00
neil 91d37c7875 fix compatibility issue 2021-05-01 22:32:44 +08:00
Jeff Goeke-Smith 81b2d0732f
arguments passed to printf are more generic
On systems that /bin/sh is served by shells other than bash, or 
shells that don't implement the same syntax as the bash printf builtin,
printf -- fails to produce the output necessary for standalone operation.

The test case for this was SmartOS, which uses ksh93 as its /bin/sh.

This change uses the more generic method of passing a format parameter
of a single string, and then the argument to replace it with.
2021-04-29 16:46:32 -04:00
neil 96a95ba9fe fix https://github.com/acmesh-official/acme.sh/issues/3312 2021-03-13 20:43:35 +08:00
neilpang 0f494c9dd6 fix https://github.com/acmesh-official/acme.sh/issues/3433 2021-03-01 18:13:50 +08:00
neilpang 9a90fe3794 fix https://github.com/acmesh-official/acme.sh/issues/3402 2021-02-25 07:45:36 +08:00
Geert Hendrickx a730a08161
No need to include EC parameters explicitly with the private key.
(they are embedded)
2021-02-23 10:28:17 +01:00
neil 06d1a98ad2
Merge pull request #3330 from medmunds/feature/notify-smtp
Implement smtp notify hook
2021-02-19 09:20:24 +08:00
medmunds 585c0c3818 Add _clearaccountconf_mutable() 2021-02-16 09:33:39 -08:00
neilpang 906ef43c00 make the fix for rsa key only 2021-02-15 21:35:59 +08:00
neilpang 4528957235 support openssl 3.0
fix https://github.com/acmesh-official/acme.sh/issues/3399
2021-02-15 21:25:27 +08:00
neil 12b1916599
Chain (#3408)
* fix https://github.com/acmesh-official/acme.sh/issues/3384
match the issuer to the root CA cert subject

* fix format

* fix https://github.com/acmesh-official/acme.sh/issues/3384

* remove the alt files. https://github.com/acmesh-official/acme.sh/issues/3384
2021-02-13 16:22:31 +08:00
Gnought 987571ce91
Updated --preferred-chain to issue ISRG properly
To support different openssl crl2pkcs7 help cli format
2021-02-11 01:08:08 +08:00
neil e6dea4c92c fix format 2021-01-30 12:05:23 +08:00
neil 58c4eaaf86
fix online install (#3385) 2021-01-30 11:27:18 +08:00
neil 8a24275ba9 add dns check wiki 2020-12-23 20:45:43 +08:00
neil a0c2d312e9 start 2.8.9 2020-12-07 21:31:02 +08:00
neil effa7fd57d add ACME_HTTP_NO_REDIRECTS and _resethttp to make http requests not follow redirects 2020-11-29 18:39:11 +08:00
neilpang 996f53373e fix https://github.com/acmesh-official/acme.sh/issues/3250 2020-11-25 18:07:54 +08:00
neil cc8f2afce9 fix for Solaris, and add Solaris to Github actions 2020-11-22 21:41:22 +08:00
neil 199ca77c2a fix for PebbleStrict mode test. 2020-11-19 20:14:28 +08:00
neil 6ee38ceaba fix https://github.com/acmesh-official/acme.sh/issues/3252 2020-11-17 22:52:05 +08:00
neilpang 2c7d2230b3 minor 2020-09-04 18:25:00 +08:00
neilpang 0c9c1ae673 fix https://github.com/acmesh-official/acme.sh/issues/3140 2020-09-02 18:22:39 +08:00
neil d73438a397 update comments 2020-09-01 21:30:56 +08:00
neil f1692b3436 begin 2.8.8 2020-08-28 20:10:12 +08:00
neil fdb96e91f1 match issuer ignoring case 2020-08-27 21:41:18 +08:00
neilpang 8d0e485120 add set-default-ca 2020-08-27 18:07:26 +08:00
Christopher Engelhard b67d663a38 fix wrong options listed in --ecc help entry 2020-08-21 12:19:26 +02:00
Christopher Engelhard dd6c5c9eea add documentation for --password option 2020-08-21 12:15:45 +02:00
Christopher Engelhard 2e87e64bd1 update individual Usage: messages to match showHelp 2020-08-21 12:12:30 +02:00
Christopher Engelhard a48c22d14f add missing blank lines after links to wiki 2020-08-21 09:58:58 +02:00
Christopher Engelhard 1521199e44 add hidden alias --to-pkcs for --to-pkcs12 2020-08-21 09:56:57 +02:00
Christopher Engelhard 2910be82a4 revert change of --no-color option 2020-08-21 09:54:47 +02:00
Christopher Engelhard 07fdb087dc fix typo 2020-08-21 09:53:04 +02:00
Christopher Engelhard 58150f5dcd change --pkcs to --pkcs12 2020-08-21 09:53:04 +02:00
Christopher Engelhard e7a6ff39f9 fix wrong indentation 2020-08-21 09:53:04 +02:00
Christopher Engelhard b086afb272 fix some more issues in showhelp() 2020-08-21 09:53:04 +02:00
Christopher Engelhard 7decf76883 group commands logically, rearrange option forms in _process()
Commands have been reordered in showhelp() to a more consistent grouping,
help > version > install > certs > csr > account > cron > other

All option alternatives in _process() case statement have been reordered toshow the canonical variants first, legacy variants after.
2020-08-21 09:53:04 +02:00
Christopher Engelhard d81369d63a add hyphenated options, fix wrong -ccr in usage() 2020-08-21 09:53:04 +02:00
Christopher Engelhard c0fbe8237b reformat usage message for consistency & clarity 2020-08-21 09:53:04 +02:00
neil b7b01999d9
fix preferred chain for renewal
fix https://github.com/acmesh-official/acme.sh/issues/3116
2020-08-20 09:13:44 +08:00
neil bb3a986859 Merge branch 'dev' of https://github.com/acmesh-official/acme.sh into dev 2020-08-18 23:28:25 +08:00
neil 50fefc3bb0 minor 2020-08-18 23:28:06 +08:00
Oliver Burgmaier 2d5f14388e Revert "Removed content for clean pull request"
This reverts commit ab47bf6451.
2020-08-18 14:52:23 +02:00
Oliver Burgmaier ab47bf6451 Removed content for clean pull request 2020-08-18 14:01:02 +02:00
Oliver Burgmaier d8bd45c2bd Fix issue #2833 with backslash in JSON
Backslash will be removed form JSON responses for each request
and for the initial configuration request
2020-08-18 13:53:48 +02:00
neil 19c4345162 fix shfmt 2020-08-17 22:18:20 +08:00
neil d5d38b3331 support multiple intermediate CA matching for `--preferred-chain` 2020-08-17 22:06:02 +08:00
neil bd04638d27 minor 2020-08-16 17:36:24 +08:00
neil e3ebd582ec support "--preferred-chain" to select chain
https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain
2020-08-16 16:57:06 +08:00
neil 95ef046d0a fix https://github.com/acmesh-official/acme.sh/issues/3103 2020-08-15 12:32:15 +08:00
neil b3a801df11 fix test endpoint 2020-08-15 10:33:24 +08:00
neil a6d22e3b22 1. save the CA url anyway.
2. clear some code.
2020-08-13 23:12:30 +08:00
neil 1177cc3f29 fix format 2020-08-12 22:09:37 +08:00
neil 269847d19d Add CA name to the `--list` command output. 2020-08-12 21:45:20 +08:00
neil df22f68088 Add info for set-default-ca 2020-08-12 21:25:35 +08:00
neil d83d8552b8 Add "--server" wiki 2020-08-12 21:17:15 +08:00
neil 365aa69afd fix format 2020-08-12 20:48:53 +08:00
neil 578c338d40 Display ZeroSSL usage 2020-08-12 20:48:53 +08:00
neil 389518e1b8 1. move email to ca conf
2. get EAB credentials from Zerossl by email automatically
2020-08-12 20:48:53 +08:00
neil d42ff227f1 fix format 2020-08-12 20:48:53 +08:00
neil 737e9e48ca 1. Support short names for `--server` parameter, The valid values are: letsencrypt, letsencrypt_test, buypass, buypass_test and zerossl
2. Support Zerossl.com acme protocol.
3. Add "--set-default-ca  --server xxxx" command to set the default CA to use.
2020-08-12 20:48:52 +08:00
neil f96d91cb6c eab 2020-08-12 20:48:52 +08:00
neil 85503655ab Display ZeroSSL usage 2020-08-12 20:47:17 +08:00
neil 8d811760a9 1. move email to ca conf
2. get EAB credentials from Zerossl by email automatically
2020-08-12 20:43:44 +08:00
neil 1e967eceef fix format 2020-08-11 23:45:12 +08:00
neil 7d20db93d3 1. Support short names for `--server` parameter, The valid values are: letsencrypt, letsencrypt_test, buypass, buypass_test and zerossl
2. Support Zerossl.com acme protocol.
3. Add "--set-default-ca  --server xxxx" command to set the default CA to use.
2020-08-11 23:28:52 +08:00
neil e932be0fb3 eab 2020-08-09 09:53:22 +08:00
neil af740592c9
Merge pull request #3073 from vi9076/dev
Fix failed test in acmetest. Item alpine:latest - test 12
2020-08-02 14:41:40 +08:00
neil c9452c9f31
Merge pull request #2574 from rewqazxv/master
Fix sudo issue
2020-08-02 14:31:45 +08:00
Vinton Huang 4f3f4e23e4 Fix failed test in acmetest. Item alpine:latest - test 12: le_test_standandalone_deactivate_v2
- Message of failed test [1]: /root/.acme.sh/acme.sh --deactivate -d testdocker.acme.sh [FAIL]
- Reason of failure: left brace was not escaped. According to the standard [2], if special chars appear first in an ERE, it will produce undefined results.
- egrep from busybox (and thus alpine) take it as an error, but egrep from GNU grep (included in most distros) and *BSD are more tolerant, just ignore it.
- Fix: consider the right brace at the right-hand side of the ERE, the result string will not contain right brace. So the left-hand side should not contain left brace, too.
[1] 446939706e/logs/alpine-latest.out (L119)
[2] 9.4.3 ERE Special Characters, The Open Group Base Specifications. https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap09.html
2020-07-27 03:55:07 +08:00
neil e2a5af1cf7 fix format 2020-07-14 21:49:50 +08:00
neil f31debc09c fix format 2020-07-13 21:03:57 +08:00
neil 6654d7a919 fix format 2020-07-13 20:56:58 +08:00
neil 0ab2cfaf8b
Merge pull request #3029 from licaon-kter/patch-2
Fix typo candindates
2020-07-08 22:25:20 +08:00