Canopy
Canopy copied to clipboard
Got HTTPS?
It happens that there's somebody implementing the ACME protocol in pure ocaml. It would be fantastic if we manage to integrate it in Canopy.
With this issue, I would like to open a discussion on the topic. For what I can see, we need to converge on:
- [ ] finding a way to serve a file on a custom path. Right now I deal with this part with https://github.com/mmaker/ocaml-acme/blob/master/src/acme_client.ml#L38-41 and expecting a stat server to be running in parallel, serving that directory. This is super easy to do with nginx or apache, but how about canopy?
- [ ] launching a Lwt thread, and scheduling future executions of this same command (to renew the certificate)
should this be canopy-specific? I still don't have a clear picture how to integrate/deploy let's encrypt..
Canopy can just as well serve these files required by the ACME protocol without having a file system, it just might be a bit tedious to implement.
I'm working on this in branch feature/letsencrypt.
There's a bunch of comments marked XXX where help would be very much appreciated
It looks awesome ! I will take a deeper look in the evening, thank you very much for your work, it takes Canopy to the next level. :) What is the status of your branch ? Can it retrieve certs ?