[ LEgo ] [ 3.1.0 ] Let's Encrypt client and ACME library written in Go

BitTorrent Sync, KODI, IPKG, NZBGet, pyLoad...
Répondre
Avatar du membre
QoolBox
Représentant de QNAP
Messages : 7843
Enregistré le : 02 janvier 2014
Professionnel : Oui
Localisation : France
Contact :

[ LEgo ] [ 3.1.0 ] Let's Encrypt client and ACME library written in Go

Message par QoolBox » 23 mai 2017 17:59

Image

source : https://github.com/xenolf/lego

download : https://qnapclub.eu/index.php?act=detail&qpkg_id=456

https://www.qnapclub.eu/fr/qpkg/456

Note :

install lego command line in NAS $PATH as symlink

Feature

Register with CA
Obtain certificates, both from scratch or with an existing CSR
Renew certificates
Revoke certificates
Robust implementation of all ACME challenges
HTTP (http-01)
DNS (dns-01)
TLS (tls-alpn-01)
SAN certificate support
Comes with multiple optional DNS providers
Custom challenge solvers
Certificate bundling
OCSP helper function
Please keep in mind that CLI switches and APIs are still subject to change.

When using the standard --path option, all certificates and account configurations are saved to a folder .lego in the current working directory.

Usage

Code : Tout sélectionner

NAME:
lego - Let's Encrypt client written in Go

USAGE:
lego [global options] command [command options] [arguments...]

COMMANDS:
run Register an account, then create and install a certificate
revoke Revoke a certificate
renew Renew a certificate
dnshelp Shows additional help for the --dns global option
list Display certificates and accounts information.
help, h Shows a list of commands or help for one command

GLOBAL OPTIONS:
--domains value, -d value Add a domain to the process. Can be specified multiple times.
--server value, -s value CA hostname (and optionally :port). The server certificate must be trusted in order to avoid further modifications to the client. (default: "https://acme-v02.api.letsencrypt.org/directory")
--accept-tos, -a By setting this flag to true you indicate that you accept the current Let's Encrypt terms of service.
--email value, -m value Email used for registration and recovery contact.
--csr value, -c value Certificate signing request filename, if an external CSR is to be used.
--eab Use External Account Binding for account registration. Requires --kid and --hmac.
--kid value Key identifier from External CA. Used for External Account Binding.
--hmac value MAC key from External CA. Should be in Base64 URL Encoding without padding format. Used for External Account Binding.
--key-type value, -k value Key type to use for private keys. Supported: rsa2048, rsa4096, rsa8192, ec256, ec384. (default: "rsa2048")
--filename value (deprecated) Filename of the generated certificate.
--path value Directory to use for storing the data. (default: "./.lego")
--http Use the HTTP challenge to solve challenges. Can be mixed with other types of challenges.
--http.port value Set the port and interface to use for HTTP based challenges to listen on.Supported: interface:port or :port. (default: ":80")
--http.webroot value Set the webroot folder to use for HTTP based challenges to write directly in a file in .well-known/acme-challenge.
--http.memcached-host value Set the memcached host(s) to use for HTTP based challenges. Challenges will be written to all specified hosts.
--tls Use the TLS challenge to solve challenges. Can be mixed with other types of challenges.
--tls.port value Set the port and interface to use for TLS based challenges to listen on. Supported: interface:port or :port. (default: ":443")
--dns value Solve a DNS challenge using the specified provider. Can be mixed with other types of challenges. Run 'lego dnshelp' for help on usage.
--dns.disable-cp By setting this flag to true, disables the need to wait the propagation of the TXT record to all authoritative name servers.
--dns.resolvers value Set the resolvers to use for performing recursive DNS queries. Supported: host:port. The default is to use the system resolvers, or Google's DNS resolvers if the system's cannot be determined.
--http-timeout value Set the HTTP timeout value to a specific value in seconds. (default: 0)
--dns-timeout value Set the DNS timeout value to a specific value in seconds. Used only when performing authoritative name servers queries. (default: 10)
--pem Generate a .pem file by concatenating the .key and .crt files together.
--cert.timeout value Set the certificate timeout value to a specific value in seconds. Only used when obtaining certificates. (default: 30)
--help, -h show help
--version, -v print the version
Modifié en dernier par QoolBox le 18 oct. 2019 17:55, modifié 2 fois.

Avatar du membre
QoolBox
Représentant de QNAP
Messages : 7843
Enregistré le : 02 janvier 2014
Professionnel : Oui
Localisation : France
Contact :

Re: [ LEgo ] [ 2.2.0 ] Let's Encrypt client and ACME library written in Go

Message par QoolBox » 09 févr. 2019 19:23

updated :mrgreen:

Toxic
Padawan
Messages : 101
Enregistré le : 21 février 2015

Re: [ LEgo ] [ 2.2.0 ] Let's Encrypt client and ACME library written in Go

Message par Toxic » 01 août 2019 23:22

do you have any plans to upgrade to 2.7.x ?
Regards Simon

TS-473-32GB QM2-2P QXG-10G1T • TVS-463-16GB QM2-2S10G1TB • TS-459 Pro 2GB • TS-121 •
Network: VM Hub 3.0 <500/35> • UniFi USG Pro4 • UniFi USW-16-150W / USW-8-60W • UniFi CloudKey G2+ • UAP AC Pro / AC Lite • Dell 7050 MFF

Avatar du membre
QoolBox
Représentant de QNAP
Messages : 7843
Enregistré le : 02 janvier 2014
Professionnel : Oui
Localisation : France
Contact :

Re: [ LEgo ] [ 2.7.2 ] Let's Encrypt client and ACME library written in Go

Message par QoolBox » 07 août 2019 13:18

updated to 2.7.2

Avatar du membre
QoolBox
Représentant de QNAP
Messages : 7843
Enregistré le : 02 janvier 2014
Professionnel : Oui
Localisation : France
Contact :

Re: [ LEgo ] [ 3.1.0 ] Let's Encrypt client and ACME library written in Go

Message par QoolBox » 18 oct. 2019 17:55

updated

Répondre

Retourner vers « Applications tierces »

Qui est en ligne

Utilisateurs parcourant ce forum : Aucun utilisateur enregistré et 10 invités