acmeshell
acmeshell copied to clipboard
janmojzis
Shell-style client for LetsEncrypt
acmeshell - client for LetsEncrypt
ACMEShell is Python2/3 compatible shell-style client for LetsEncrypt. It's simple tool for anyone who would like to request a SSL certificate.
- acmeshell.py
- also on github
warning
- project renamed from letsencryptshell due to trademark violation
goals
- user friendly (simple shell-style user interface) ... see examples
- script friendly (simple integration into automated scripts) ... see examples
- portable code (compatible with python2 and python3)
- easily auditable (currently less than 1500 rows of code)
registration
Run it
acmeshell
By default it creates: home directory: {home}/.acmeshell directory for certificates: {home}/.acmeshell/certs 3072bit master secret-key: {home}/.acmeshell/sk.pem 3072bit master public-key: {home}/.acmeshell/pk.pem
Confirm the agreement and Register Your RSA public-key and email
ACMEShell> register https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf {email@address}
usage
Get challenge from ACME server
ACMEShell> domainchallenge {domain}
... Now It's time to create page http://{domain}/.well-known/acme-challenge/{httptoken_from_challenge} ... or DNS record: _acme-challenge.{domain} 300 IN TXT "{dnstoken_from_challenge}"
Confirm authentication
ACMEShell> domainconfirm {domain} http
or
ACMEShell> domainconfirm {domain} dns
Get certificate
ACMEShell> certificateget {domain}
It creates: 2048bit RSA or 256bit ECDSA key: {home}/.acmeshell/certs/{domain}.key signed x509 certificate: {home}/.acmeshell/certs/{domain}.crt intermediate certificate: {home}/.acmeshell/certs/{domain}.im
That's it!
Same steps for certificate creation and update
notes
- acmeshell currently depends on openssl binary
- home directory {home}/.acmeshell should be on encrypted filesystem
- acmeshell currently supports only http-01 ACME challege (tls-sni-01 will be added soon)
- acmeshell currently supports RSA(2048bit) and ECDSA(256bit) keys
janmojzis