Commit Graph

998 Commits

Author SHA1 Message Date
neilpang 38a067e203 fix https://github.com/acmesh-official/acme.sh/issues/3752 2021-10-12 20:55:11 +08:00
Phil Krylov 40e8c5e2b0
Don't use global variable as local in recursion context
```nginx
include conf.d/*;
include sites-enabled/*;
```
In this situation, after the first recursive `_checkConf` invocation 4 lines below, `$_c_file` does not contain what you expect anymore, and the second lookup checks for `conf.d/sites-enabled/*` which is obviously wrong.
2021-10-08 18:24:21 +02:00
neil 84fe6654cc fix for https://github.com/acmesh-official/acme.sh/issues/3717 2021-10-03 20:59:55 +08:00
neil d4e1899747 support "--set-default-chain", fix https://github.com/acmesh-official/acme.sh/issues/3717 2021-10-03 19:02:45 +08:00
neil b335840f97
Merge pull request #3657 from Sp1l/extend_pre_hook
Make domain names available to pre hook
2021-08-22 11:01:02 +08:00
neilpang 6bdf689d0f fix https://github.com/acmesh-official/acme.sh/issues/3660 2021-08-15 08:52:55 +08:00
Bernard Spil e164362069 Make domain names available to pre hook
Export Le_Domains and Le_Alt so your pre-hook script can run additional checks.

Allows running checks on the domain names before the first call to the ACME API. Thereby not counting against the rate-limit when an issue is going to be problematic.

Supersedes:	#3288
2021-08-10 12:36:29 +02:00
neilpang ccfd907914 fix https://github.com/acmesh-official/acme.sh/issues/3649 2021-08-07 21:06:05 +08:00
neilpang 5a44e63cad fix nginx mode
https://github.com/acmesh-official/acme.sh/issues/3648#issuecomment-894045613
2021-08-06 21:22:10 +08:00
neilpang 06580bf0e4 fix https://github.com/acmesh-official/acme.sh/issues/1914#issuecomment-893188476 2021-08-05 20:12:42 +08:00
jonwltn 6b97dc6734
Minor output formatting changes. 2021-08-04 10:44:48 -07:00
neilpang 2b5e2d4760 fix nginx mode 2021-08-01 15:44:14 +08:00
neilpang 89abad7980 fix https://github.com/acmesh-official/acme.sh/issues/3635 2021-08-01 13:11:52 +08:00
neilpang 5cc1d9521c fix https://github.com/acmesh-official/acme.sh/issues/3624#issuecomment-887689325 2021-07-28 22:14:54 +08:00
neil 655e34b166 minor, clean links for renewal 2021-07-24 16:23:43 +08:00
neilpang 103810ce20 add info 2021-07-20 21:05:17 +08:00
neil d70b759cb9 format 2021-07-15 22:47:20 +08:00
neil ae3dda0f8f add retry for get() and post() 2021-07-15 22:21:32 +08:00
neil dcc50093bb fix https://github.com/acmesh-official/acme.sh/issues/3600 2021-07-12 21:46:08 +08:00
jonwltn a0c5d17539
Fix the URL for checking DNSPod availability. 2021-07-02 09:23:45 -07:00
neilpang 2d07185300 use letsencrypt server to renew certs if no server was saved. 2021-06-28 21:16:32 +08:00
neilpang e0def66959 fix for compatiblity 2021-06-27 11:29:51 +08:00
neilpang fb73dceab0 fix format 2021-06-25 22:46:55 +08:00
neilpang 13fd83e0ba fix revoke 2021-06-25 22:44:23 +08:00
neilpang 13ab98440c fix initapi 2021-06-25 22:23:17 +08:00
neilpang 1752004301 fix deactivate 2021-06-25 22:16:16 +08:00
neilpang 536a5f7cff fix deactivate 2021-06-25 21:59:38 +08:00
neilpang 29fe1c86da fix initapi 2021-06-24 23:21:10 +08:00
neilpang 9daeae1695 remove unnecessary check 2021-06-24 20:45:15 +08:00
neilpang 014e016058 add retry for init api 2021-06-24 20:35:49 +08:00
neilpang c7285967d6 fix for list short name 2021-06-22 20:39:00 +08:00
neilpang c0ae44a41b fix format 2021-06-21 22:59:14 +08:00
neilpang 593e8e1f63 move ca key path 2021-06-21 22:47:22 +08:00
neilpang 707cf35f0a fix format 2021-06-21 22:29:14 +08:00
neilpang 30f11d0e16 typo 2021-06-21 21:41:56 +08:00
neilpang 53d6ab6c23 support SSL.com 2021-06-21 21:31:00 +08:00
neilpang 280e44304a fix for compatibility to sslcom 2021-06-21 20:11:15 +08:00
neilpang 8ae08b29e4 fix for solaris 2021-06-13 21:37:26 +08:00
neilpang d0b514890a change default ca to zerossl 2021-06-13 14:29:26 +08:00
neil 43cb230f19
Merge pull request #3535 from sparunakian/dev
Fix typo (#3521)
2021-06-02 23:06:36 +08:00
neil fd6a59202d start 3.0.0 2021-06-02 23:06:12 +08:00
Stéphane Parunakian e353f66eaa Fix typo 2021-06-02 16:06:08 +02:00
neil f627a02886 add error message 2021-06-01 21:24:37 +08:00
neil 5f9daa6640 check initAPI error 2021-06-01 21:23:00 +08:00
neil 7710a33b6c fix format 2021-05-22 23:48:39 +08:00
neil af3ea2d4fd remove ACME v1 support 2021-05-22 23:45:50 +08:00
neilpang aede5c486b fix https://github.com/acmesh-official/acme.sh/issues/3504
check invalid status first.
2021-05-07 22:02:40 +08:00
neilpang aa59c46c4c fix https://github.com/acmesh-official/acme.sh/issues/3504 2021-05-07 21:49:47 +08:00
neilpang 0881cf1379 start 2.9.0 2021-05-04 13:32:59 +08:00
neil 290beb90a7 minor 2021-05-03 17:14:54 +08:00
neil 0a4ef17135 fix nginx relative path issue:
https://github.com/acmesh-official/acme.sh/issues/1743
https://github.com/acmesh-official/acme.sh/issues/1914
2021-05-03 17:11:02 +08:00
neil e0c32ce700 minor 2021-05-03 16:42:09 +08:00
neil e65144a105 fix https://github.com/acmesh-official/acme.sh/issues/3487
suppor Ali doh and dnspod doh.
2021-05-03 16:37:13 +08:00
neil 25a8240d12 fix https://github.com/acmesh-official/acme.sh/issues/3421 2021-05-03 15:52:56 +08:00
neil 91d37c7875 fix compatibility issue 2021-05-01 22:32:44 +08:00
Jeff Goeke-Smith 81b2d0732f
arguments passed to printf are more generic
On systems that /bin/sh is served by shells other than bash, or 
shells that don't implement the same syntax as the bash printf builtin,
printf -- fails to produce the output necessary for standalone operation.

The test case for this was SmartOS, which uses ksh93 as its /bin/sh.

This change uses the more generic method of passing a format parameter
of a single string, and then the argument to replace it with.
2021-04-29 16:46:32 -04:00
neil 96a95ba9fe fix https://github.com/acmesh-official/acme.sh/issues/3312 2021-03-13 20:43:35 +08:00
neilpang 0f494c9dd6 fix https://github.com/acmesh-official/acme.sh/issues/3433 2021-03-01 18:13:50 +08:00
neilpang 9a90fe3794 fix https://github.com/acmesh-official/acme.sh/issues/3402 2021-02-25 07:45:36 +08:00
Geert Hendrickx a730a08161
No need to include EC parameters explicitly with the private key.
(they are embedded)
2021-02-23 10:28:17 +01:00
neil 06d1a98ad2
Merge pull request #3330 from medmunds/feature/notify-smtp
Implement smtp notify hook
2021-02-19 09:20:24 +08:00
medmunds 585c0c3818 Add _clearaccountconf_mutable() 2021-02-16 09:33:39 -08:00
neilpang 906ef43c00 make the fix for rsa key only 2021-02-15 21:35:59 +08:00
neilpang 4528957235 support openssl 3.0
fix https://github.com/acmesh-official/acme.sh/issues/3399
2021-02-15 21:25:27 +08:00
neil 12b1916599
Chain (#3408)
* fix https://github.com/acmesh-official/acme.sh/issues/3384
match the issuer to the root CA cert subject

* fix format

* fix https://github.com/acmesh-official/acme.sh/issues/3384

* remove the alt files. https://github.com/acmesh-official/acme.sh/issues/3384
2021-02-13 16:22:31 +08:00
Gnought 987571ce91
Updated --preferred-chain to issue ISRG properly
To support different openssl crl2pkcs7 help cli format
2021-02-11 01:08:08 +08:00
neil e6dea4c92c fix format 2021-01-30 12:05:23 +08:00
neil 58c4eaaf86
fix online install (#3385) 2021-01-30 11:27:18 +08:00
neil 8a24275ba9 add dns check wiki 2020-12-23 20:45:43 +08:00
neil a0c2d312e9 start 2.8.9 2020-12-07 21:31:02 +08:00
neil effa7fd57d add ACME_HTTP_NO_REDIRECTS and _resethttp to make http requests not follow redirects 2020-11-29 18:39:11 +08:00
neilpang 996f53373e fix https://github.com/acmesh-official/acme.sh/issues/3250 2020-11-25 18:07:54 +08:00
neil cc8f2afce9 fix for Solaris, and add Solaris to Github actions 2020-11-22 21:41:22 +08:00
neil 199ca77c2a fix for PebbleStrict mode test. 2020-11-19 20:14:28 +08:00
neil 6ee38ceaba fix https://github.com/acmesh-official/acme.sh/issues/3252 2020-11-17 22:52:05 +08:00
neilpang 2c7d2230b3 minor 2020-09-04 18:25:00 +08:00
neilpang 0c9c1ae673 fix https://github.com/acmesh-official/acme.sh/issues/3140 2020-09-02 18:22:39 +08:00
neil d73438a397 update comments 2020-09-01 21:30:56 +08:00
neil f1692b3436 begin 2.8.8 2020-08-28 20:10:12 +08:00
neil fdb96e91f1 match issuer ignoring case 2020-08-27 21:41:18 +08:00
neilpang 8d0e485120 add set-default-ca 2020-08-27 18:07:26 +08:00
Christopher Engelhard b67d663a38 fix wrong options listed in --ecc help entry 2020-08-21 12:19:26 +02:00
Christopher Engelhard dd6c5c9eea add documentation for --password option 2020-08-21 12:15:45 +02:00
Christopher Engelhard 2e87e64bd1 update individual Usage: messages to match showHelp 2020-08-21 12:12:30 +02:00
Christopher Engelhard a48c22d14f add missing blank lines after links to wiki 2020-08-21 09:58:58 +02:00
Christopher Engelhard 1521199e44 add hidden alias --to-pkcs for --to-pkcs12 2020-08-21 09:56:57 +02:00
Christopher Engelhard 2910be82a4 revert change of --no-color option 2020-08-21 09:54:47 +02:00
Christopher Engelhard 07fdb087dc fix typo 2020-08-21 09:53:04 +02:00
Christopher Engelhard 58150f5dcd change --pkcs to --pkcs12 2020-08-21 09:53:04 +02:00
Christopher Engelhard e7a6ff39f9 fix wrong indentation 2020-08-21 09:53:04 +02:00
Christopher Engelhard b086afb272 fix some more issues in showhelp() 2020-08-21 09:53:04 +02:00
Christopher Engelhard 7decf76883 group commands logically, rearrange option forms in _process()
Commands have been reordered in showhelp() to a more consistent grouping,
help > version > install > certs > csr > account > cron > other

All option alternatives in _process() case statement have been reordered toshow the canonical variants first, legacy variants after.
2020-08-21 09:53:04 +02:00
Christopher Engelhard d81369d63a add hyphenated options, fix wrong -ccr in usage() 2020-08-21 09:53:04 +02:00
Christopher Engelhard c0fbe8237b reformat usage message for consistency & clarity 2020-08-21 09:53:04 +02:00
neil b7b01999d9
fix preferred chain for renewal
fix https://github.com/acmesh-official/acme.sh/issues/3116
2020-08-20 09:13:44 +08:00
neil bb3a986859 Merge branch 'dev' of https://github.com/acmesh-official/acme.sh into dev 2020-08-18 23:28:25 +08:00
neil 50fefc3bb0 minor 2020-08-18 23:28:06 +08:00
Oliver Burgmaier 2d5f14388e Revert "Removed content for clean pull request"
This reverts commit ab47bf6451.
2020-08-18 14:52:23 +02:00
Oliver Burgmaier ab47bf6451 Removed content for clean pull request 2020-08-18 14:01:02 +02:00
Oliver Burgmaier d8bd45c2bd Fix issue #2833 with backslash in JSON
Backslash will be removed form JSON responses for each request
and for the initial configuration request
2020-08-18 13:53:48 +02:00
neil 19c4345162 fix shfmt 2020-08-17 22:18:20 +08:00
neil d5d38b3331 support multiple intermediate CA matching for `--preferred-chain` 2020-08-17 22:06:02 +08:00
neil bd04638d27 minor 2020-08-16 17:36:24 +08:00
neil e3ebd582ec support "--preferred-chain" to select chain
https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain
2020-08-16 16:57:06 +08:00
neil 95ef046d0a fix https://github.com/acmesh-official/acme.sh/issues/3103 2020-08-15 12:32:15 +08:00
neil b3a801df11 fix test endpoint 2020-08-15 10:33:24 +08:00
neil a6d22e3b22 1. save the CA url anyway.
2. clear some code.
2020-08-13 23:12:30 +08:00
neil 1177cc3f29 fix format 2020-08-12 22:09:37 +08:00
neil 269847d19d Add CA name to the `--list` command output. 2020-08-12 21:45:20 +08:00
neil df22f68088 Add info for set-default-ca 2020-08-12 21:25:35 +08:00
neil d83d8552b8 Add "--server" wiki 2020-08-12 21:17:15 +08:00
neil 365aa69afd fix format 2020-08-12 20:48:53 +08:00
neil 578c338d40 Display ZeroSSL usage 2020-08-12 20:48:53 +08:00
neil 389518e1b8 1. move email to ca conf
2. get EAB credentials from Zerossl by email automatically
2020-08-12 20:48:53 +08:00
neil d42ff227f1 fix format 2020-08-12 20:48:53 +08:00
neil 737e9e48ca 1. Support short names for `--server` parameter, The valid values are: letsencrypt, letsencrypt_test, buypass, buypass_test and zerossl
2. Support Zerossl.com acme protocol.
3. Add "--set-default-ca  --server xxxx" command to set the default CA to use.
2020-08-12 20:48:52 +08:00
neil f96d91cb6c eab 2020-08-12 20:48:52 +08:00
neil 85503655ab Display ZeroSSL usage 2020-08-12 20:47:17 +08:00
neil 8d811760a9 1. move email to ca conf
2. get EAB credentials from Zerossl by email automatically
2020-08-12 20:43:44 +08:00
neil 1e967eceef fix format 2020-08-11 23:45:12 +08:00
neil 7d20db93d3 1. Support short names for `--server` parameter, The valid values are: letsencrypt, letsencrypt_test, buypass, buypass_test and zerossl
2. Support Zerossl.com acme protocol.
3. Add "--set-default-ca  --server xxxx" command to set the default CA to use.
2020-08-11 23:28:52 +08:00
neil e932be0fb3 eab 2020-08-09 09:53:22 +08:00
neil af740592c9
Merge pull request #3073 from vi9076/dev
Fix failed test in acmetest. Item alpine:latest - test 12
2020-08-02 14:41:40 +08:00
neil c9452c9f31
Merge pull request #2574 from rewqazxv/master
Fix sudo issue
2020-08-02 14:31:45 +08:00
Vinton Huang 4f3f4e23e4 Fix failed test in acmetest. Item alpine:latest - test 12: le_test_standandalone_deactivate_v2
- Message of failed test [1]: /root/.acme.sh/acme.sh --deactivate -d testdocker.acme.sh [FAIL]
- Reason of failure: left brace was not escaped. According to the standard [2], if special chars appear first in an ERE, it will produce undefined results.
- egrep from busybox (and thus alpine) take it as an error, but egrep from GNU grep (included in most distros) and *BSD are more tolerant, just ignore it.
- Fix: consider the right brace at the right-hand side of the ERE, the result string will not contain right brace. So the left-hand side should not contain left brace, too.
[1] 446939706e/logs/alpine-latest.out (L119)
[2] 9.4.3 ERE Special Characters, The Open Group Base Specifications. https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap09.html
2020-07-27 03:55:07 +08:00
neil e2a5af1cf7 fix format 2020-07-14 21:49:50 +08:00
neil f31debc09c fix format 2020-07-13 21:03:57 +08:00
neil 6654d7a919 fix format 2020-07-13 20:56:58 +08:00
neil 0ab2cfaf8b
Merge pull request #3029 from licaon-kter/patch-2
Fix typo candindates
2020-07-08 22:25:20 +08:00
grindsa a329547682 prepending for ecc signature
leftpadding "0" if _ec_s and _ec_r are to short
2020-07-08 11:59:20 +02:00
Licaon_Kter dbc435506c
Fix typo candindates 2020-07-07 12:06:37 +00:00
Tony Gravagno 94787d537a
Issue #2849 Trivial variable name fix from apacheMajer to apacheMajor 2020-06-29 11:51:55 -07:00
Tony Gravagno eca57beec1
Issue #2850 : grammar corrections for "exists" and "exist". 2020-06-29 11:29:10 -07:00
grindsa 1fe8235a85 Update acme.sh 2020-05-25 20:28:05 +02:00
neil 15dded712c fix retry
https://github.com/acmesh-official/acme.sh/issues/2939#issuecomment-632481658
2020-05-24 18:04:47 +08:00
Dan Dascalescu 427c278012
Fix sloppy English 2020-05-22 10:28:29 -07:00
neil 59fd48cfe2 support Retry-After header
https://github.com/acmesh-official/acme.sh/issues/2939
2020-05-21 22:32:19 +08:00
neil cc78ab4855
Merge pull request #2923 from mdbraber/add-provider-transip
Add TransIP provider
2020-05-21 22:27:50 +08:00
Maarten den Braber 63031fb278 bugfixes 2020-05-19 20:04:23 +02:00
neil 114f2a1465 fix https://github.com/acmesh-official/acme.sh/issues/2880 2020-05-19 23:26:58 +08:00
Maarten den Braber 5d2777634a Fix forgotten then 2020-05-19 16:43:39 +02:00
Maarten den Braber 2d5b4a0003 Change if-statement for private keys to more portable version 2020-05-19 16:39:49 +02:00
Maarten den Braber a4c57ee363 Add TransIP provider 2020-05-13 15:35:51 +02:00
neil 9044adecb5 start 2.8.7 2020-05-04 08:43:47 +08:00
neil 6ba1eda96f fix https://github.com/acmesh-official/acme.sh/issues/2883#issuecomment-619215961 2020-04-25 22:44:00 +08:00
neil a995333081 fix format 2020-04-18 22:34:32 +08:00
neil 1041c9f9fc support revoke reason.
https://github.com/acmesh-official/acme.sh/issues/2856
2020-04-18 20:03:48 +08:00
Simon Wydooghe 2febdfc363
Fix: allow removal of email address as contact
It seems the current code doesn't allow for removing the email address
from the contact field. This fixes that. This only removes the email
address if an explicit empty email address is specified on the command
line or in the account.conf file. If it is left unspecified on the
command line it still just uses whatever was configured in the
account.conf.
2020-04-17 15:53:15 +02:00
neil 93de1e4903 un-escape json chars
fix https://github.com/acmesh-official/acme.sh/issues/2833
2020-04-12 11:48:24 +08:00
Oliver Burgmaier 7595808d26 fix #2828 mailto compliant to RFC6068
This fix removes the space between "mailto:" and the email address to
make the contact attribute compliant to RFC6068.
2020-04-01 20:35:07 +02:00