acmesh-official/acme.sh on Hacker News

▲ 108

DNS alias mode (2020)

story by throw0101a · 2021-08-21 · 34 comments

…by a systemd timer and renews (using the DNS challenge) and deploys all expiring certificates. [1] https://github.com/acmesh-official/acme.sh

comment by mimimi31 · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

…this someone else posted a sibling comment about ACME DNS alias mode, which I had not heard of. https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo... That's very close to good enough. Though it would still be nice if DNS…

comment by codetrotter · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

…which is also unsafe should the box get compromised. Are you aware of LE/ACME's "DNS alias" mode? * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo... * https://www.eff.org/deeplinks/2018/02/technical-deep-dive-se... Let us…

comment by throw0101a · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

…with removing it yet. [2]: https://certbot-dns-digitalocean.readthedocs.io/en/stable/ [3]: https://github.com/acmesh-official/acme.sh/wiki/dnsapi#20-us... [4]: https://openwrt.org/docs/techref/odhcpd#dhcp_section

comment by magicalhippo · 2021-07-16 · in Increasing HTTPS Adoption

https://github.com/acmesh-official/acme.sh this works for me for most of my devices at home. pfSense and Proxmox both have plugins for it. Each device requests its own certificate for a host on a private subdomain of a domain I own e.g.…

comment by vmladenov · 2020-09-21 · in Let's Encrypt's New Root and Intermediate Certificates

I highly recommend https://github.com/acmesh-official/acme.sh to solve the annoyance of the terribly bloated and poorly built Certbot application.

comment by daneel_w · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…a while since I last needed to get involved with letsencrypt stuff but I've always used and liked: https://github.com/acmesh-official/acme.sh Ansible's letsencrypt module was also not bad last time I used it:…

comment by corford · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…makes the acme protocol feel more complicated than it is. [1]: https://github.com/go-acme/lego [2]: https://github.com/acmesh-official/acme.sh [3]: https://github.com/diafygi/acme-tiny

comment by rnijveld · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…I’ve been using acme.sh over certbot for a while now. Saves headaches about python dependence. https://github.com/acmesh-official/acme.sh

comment by Crosseye_Jack · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…it. If the certbot is too complicated or "pulls in too much cruft" then use a different client. https://github.com/acmesh-official/acme.sh for example.

comment by mrunkel · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…* https://dan.langille.org/2019/02/01/acme-domain-alias-mode/ * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo... The CNAME has to be set up initially, but can be left lying around otherwise. This is how $WOR

comment by throw0101a · 2020-09-03 · in Automatic SSL Certificates for internal IP's for home k8 setup using LetsEncrypt

…reliable. Since I used it, they eliminated the bash dependency, and now it is unix shell compliant: https://github.com/acmesh-official/acme.sh I would definitely use it in the future if I was configuring a Linux box to renew certificates.…

comment by hedora · 2020-05-14 · in The modern HTTPS world has no place for old web servers

…one of many ACME clients. AFAICT acme.sh can do wildcard certs, and it’s not dependent on Bash. https://github.com/acmesh-official/acme.sh

comment by cpach · 2020-05-13 · in The modern HTTPS world has no place for old web servers

…was revoked. That's called OCSP Must-Staple: see https://en.wikipedia.org/wiki/OCSP_stapling , https://github.com/acmesh-official/acme.sh/blob/d437d6fde95d... , https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deploym...

comment by moviuro · 2020-03-09 · in The browsers are probably running the TLS show now

▲ 1

A pure Unix shell script implementing ACME client protocol

story by LinuxBender · 2020-03-06 · 0 comments

…if dns-01 is how you roll. I run my own DNS server using Knot and acme.sh supports it. [1]: https://github.com/acmesh-official/acme.sh

comment by alwillis · 2020-02-28 · in Let's Encrypt Has Issued a Billion Certificates

…or other software: * https://github.com/joohoi/acme-dns This is often called 'DNS alias' mode: * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo... * https://www.eff.org/deeplinks/2018/02/technical-deep-dive-se...

comment by throw0101a · 2020-02-19 · in Let's Encrypt has turned on stricter validation requirements

…to another domain using a CNAME: * https://dan.langille.org/2019/02/01/acme-domain-alias-mode/ * https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo... * https://www.eff.org/deeplinks/2018/02/technical-deep-dive-se... So if you…

comment by throw0101a · 2020-02-12 · in Let's Encrypt: an automated certificate authority to encrypt the entire web

Niel Pang's acme.sh script works perfect for me: https://github.com/acmesh-official/acme.sh

comment by b3lvedere · 2020-02-12 · in Let's Encrypt: an automated certificate authority to encrypt the entire web

▲ 3

A pure Unix shell script implementing ACME client protocol

story by LinuxBender · 2020-01-31 · 0 comments

…ACME DNS aliasing with CNAMEs? * https://www.eff.org/deeplinks/2018/02/technical-deep-dive-se... * https://github.com/Neilpang/acme.sh/wiki/DNS-alias-mode * https://dan.langille.org/2019/02/01/acme-domain-alias-mode/ My work's DNS provider…

comment by throw0101a · 2019-12-18 · in Still Why No HTTPS?

▲ 2

A pure Unix shell script implementing ACME client protocol

story by LinuxBender · 2019-10-21 · 0 comments

…have set up a new DNS infrastructure so that we can use dns-01 validation of TXT records there: * https://github.com/Neilpang/acme.sh/wiki/DNS-alias-mode * https://dan.langille.org/2019/02/01/acme-domain-alias-mode/ *…

comment by throw0101a · 2019-08-18 · in Google wants to reduce lifespan for HTTPS certificates to one year

Depending on how you approach it, it can be completely automated: https://github.com/Neilpang/acme.sh

comment by jmngomes · 2019-07-30 · in Dark emerges with ‘deployless’ software model

…Certs supports all dns providers supported by acme.sh (more than 80), you can find the list here: https://github.com/Neilpang/acme.sh/wiki/dnsapi

comment by MathieuN · 2019-06-11 · in Show HN: A Let's Encrypt Certificates Manager for Kubernetes

…(the awesome ACME client by Neil Pang) announced support for BuyPass alongside Let's Encrypt: https://github.com/Neilpang/acme.sh/wiki/BuyPass.com-CA Obviously this is really great in every respect, including a potential opportunity for…

comment by schoen · 2019-01-01 · in Let's Encrypt: Looking Forward to 2019

…to automate certificate issuing, installation, verification, renewal and some server configuration: https://github.com/Neilpang/acme.sh

comment by jmngomes · 2018-11-05 · in Redbird: A modern reverse proxy for Node

…come across... incredible its all written in BASH and a great way to learn some slick scripting. https://github.com/Neilpang/acme.sh

comment by pastyboy · 2018-06-13 · in Ask HN: Beautiful shell code?

https://github.com/Neilpang/acme.sh does exactly what you want.

comment by orf · 2018-03-13 · in ACME v2 and Wildcard Certificate Support is Live

…certs - there's no requirement for a web server, in order to use let's encrypt. See eg point 4: 0 https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert

comment by e12e · 2018-03-13 · in ACME v2 and Wildcard Certificate Support is Live

…how to actually obtain a wildcard cert this way, here's the quick version: 1. Use acme.sh: https://github.com/Neilpang/acme.sh acme.sh --issue -d *.example.com --dns If your DNS provider has a supported api, you may be able to…

comment by massaman_yams · 2018-03-13 · in ACME v2 and Wildcard Certificate Support is Live

On the other hand, we have stuff like this: https://github.com/Neilpang/acme.sh/blob/master/dnsapi/dns_a... Duuuude! There's an awscli out there that does all that for you, is maintained by Amazon, covers all the edge cases and is forward…

comment by oblio · 2018-02-28 · in A Unix shell script implementing ACME client protocol

▲ 125

A Unix shell script implementing ACME client protocol

story by ausjke · 2018-02-28 · 52 comments

…out acme.sh and remember, changing your DNS provider or hosting it yourself really isn't that bad. https://github.com/Neilpang/acme.sh

comment by piracykills · 2018-02-21 · in Let's Encrypt ACMEv2 and Wildcard Launch Delay

I have found https://github.com/Neilpang/acme.sh to be incredibly easy to deploy in several different configurations.

comment by thunfischbrot · 2018-02-18 · in Let's Encrypt Hits 50M Active Certificates and Counting

…offering (it is possible, because acme.sh does it [0] -- maybe I'll just use this as a base?) [0] https://github.com/Neilpang/acme.sh/tree/master/dnsapi

comment by moviuro · 2018-01-26 · in How and why I run my own DNS servers

I'm a fan of https://github.com/Neilpang/acme.sh You should be up and running in minutes with it.

comment by corford · 2017-07-12 · in Life Is About to Get Harder for Websites Without HTTPS

…are not aware, Let's Encrypt does support the DNS TXT method as well. I use the acme.sh client ( https://github.com/Neilpang/acme.sh ) for updating certs for a site on a managed platform, using the DNS verification method.

comment by AnssiH · 2017-07-08 · in Final Removal of Trust in WoSign and StartCom Certificates

…runs in pure shell, no need to install Python. It's my goto client and it just works.. everywhere. https://github.com/Neilpang/acme.sh

comment by weavie · 2017-06-29 · in Milestone: 100M Certificates Issued

▲ 1

acme.sh

story by mkj · 2017-02-25 · 0 comments

▲ 1

Le.sh renamed to acme.sh

story by r0muald · 2016-04-14 · 1 comment