lego icon indicating copy to clipboard operation
lego copied to clipboard

Add support for ZeroSSL account registration

Open fln opened this issue 3 years ago • 1 comments

This commit extends lego library and cli tool to support issuing certificates from ZeroSSL without having to manually create an account.

Without this commit ZeroSSL can be used but users need to manually create ZeroSSL account and start lego in EAB (External Account Binding) mode.

From the lego cli tool perspective this commit:

Detects if lego ir running with ZeroSSL ACME directory --server https://acme.zerossl.com/v2/DV90 and uses ZeroSSL API to issue keys for EAB. There is no need to provide --eab, --kid, --hmac values anymore.

From the library perspective this commit:

Creates new method RegisterWithZeroSSL() in the registration package which takes care of creating ZeroSSL account with a given email. Internally it re-uses RegisterWithExternalAccountBinding() method after KID and HMAC are retrieved from ZeroSSL registration endpoint.

fln avatar Oct 03 '21 13:10 fln

i would also like this feature. i've actually rebased this patch and am using it already for myself.

ashkitten avatar Aug 17 '22 13:08 ashkitten