sysadmin/acme-tiny
1
0
Fork 0
mirror of https://github.com/diafygi/acme-tiny synced 2026-10-07 10:01:56 +03:00
Code Issues Packages Projects Releases Wiki Activity

compressed some lines to bring the line count back down under 200 lines, removed example cronjob in command line help since it comflicts with the README

Browse Source
This commit is contained in:
Daniel Roesler
2021-08-21 20:58:07 -05:00
parent fa6eafe361
commit 447652afd2
1 changed files with 5 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
acme_tiny.py
+5 -10
View File
@@ -77,8 +77,7 @@ def get_crt(account_key, csr, acme_dir, log=LOGGER, CA=DEFAULT_CA, disable_check
pub_hex, pub_exp = re.search(pub_pattern, out.decode('utf8'), re.MULTILINE|re.DOTALL).groups() pub_hex, pub_exp = re.search(pub_pattern, out.decode('utf8'), re.MULTILINE|re.DOTALL).groups()
pub_exp = "{0:x}".format(int(pub_exp)) pub_exp = "{0:x}".format(int(pub_exp))
pub_exp = "0{0}".format(pub_exp) if len(pub_exp) % 2 else pub_exp pub_exp = "0{0}".format(pub_exp) if len(pub_exp) % 2 else pub_exp
alg = "RS256" alg, jwk = "RS256", {
jwk = {
"e": _b64(binascii.unhexlify(pub_exp.encode("utf-8"))), "e": _b64(binascii.unhexlify(pub_exp.encode("utf-8"))),
"kty": "RSA", "kty": "RSA",
"n": _b64(binascii.unhexlify(re.sub(r"(\s|:)", "", pub_hex).encode("utf-8"))), "n": _b64(binascii.unhexlify(re.sub(r"(\s|:)", "", pub_hex).encode("utf-8"))),
@@ -174,15 +173,11 @@ def main(argv=None):
parser = argparse.ArgumentParser( parser = argparse.ArgumentParser(
formatter_class=argparse.RawDescriptionHelpFormatter, formatter_class=argparse.RawDescriptionHelpFormatter,
description=textwrap.dedent("""\ description=textwrap.dedent("""\
This script automates the process of getting a signed TLS certificate from Let's Encrypt using This script automates the process of getting a signed TLS certificate from Let's Encrypt using the ACME protocol.
the ACME protocol. It will need to be run on your server and have access to your private It will need to be run on your server and have access to your private account key, so PLEASE READ THROUGH IT!
account key, so PLEASE READ THROUGH IT! It's only ~200 lines, so it won't take long. It's only ~200 lines, so it won't take long.
Example Usage: Example Usage: python acme_tiny.py --account-key ./account.key --csr ./domain.csr --acme-dir /usr/share/nginx/html/.well-known/acme-challenge/ > signed_chain.crt
python acme_tiny.py --account-key ./account.key --csr ./domain.csr --acme-dir /usr/share/nginx/html/.well-known/acme-challenge/ > signed_chain.crt
Example Crontab Renewal (once per month):
0 0 1 * * python /path/to/acme_tiny.py --account-key /path/to/account.key --csr /path/to/domain.csr --acme-dir /usr/share/nginx/html/.well-known/acme-challenge/ > /path/to/signed_chain.crt 2>> /var/log/acme_tiny.log
""") """)
) )
parser.add_argument("--account-key", required=True, help="path to your Let's Encrypt account private key") parser.add_argument("--account-key", required=True, help="path to your Let's Encrypt account private key")