mirror
/
openwrt-packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Releases Activity
10,270 Commits 9 Branches 1 Tag 148 MiB
Commit Graph

15 Commits

Author SHA1 Message Date
Zhong Jianxin 6dbac97707 acme: Add acme-dnsapi package 
Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
 2018-04-19 11:05:35 +02:00
Zhong Jianxin b528ec5e79 acme: Support DNS mode 
Tested with dynu.com ddns.

Install acme-dnsapi:

    # opkg install acme-dnsapi

Example `/etc/config/acme`:

    config acme
        option state_dir '/etc/acme'
        option account_email email@example.org'
        option debug '0'

    config cert 'foo'
        option enabled '1'
        option use_staging '1'
        option keylength '2048'
        option update_uhttpd '0'
        option dns 'dns_dynu'
        list domains 'foo.dynu.com'
        list domains '*.foo.dynu.com'
        list credentials 'Dynu_ClientId="xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"'
        list credentials 'Dynu_Secret="yyyyyyyyyyyyyyyyyyyyyyyyy"'

Run:

    # /etc/init.d/acme start

Signed-off-by: Zhong Jianxin <azuwis@gmail.com>
 2018-04-19 11:05:35 +02:00
Rosen Penev e5d0ff5421 acme: Switch to normal releases + other fixes. 
As acme.sh has releases, switch to using those. Update the version accordingly.

Also rearranged some stuff in the hope that uscan will start tracking releases instead of git commits. Makefile is more simple as a result.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2018-04-15 14:11:21 +02:00
Lucian Cristian 2f1f402b2f acme: update acme to latest git 
adds V2 support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2018-03-26 22:19:31 +02:00
Etienne Champetier 4006865ae8 treewide: run "make check FIXUP=1" 
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
 2017-08-29 21:41:14 -07:00
Toke Høiland-Jørgensen 0424ac8049 acme: Make sure postrm script doesn't fail 
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2017-08-16 01:14:18 +02:00
Aleksei Nosachev 8599b8d7a3 Fix acme-challenge ./well-known check / webroot detection (#4339) 
fixes webroot to be defined as 
_currentRoot='/www'
instead of being interpreted as
_currentRoot='"/www"'

Signed-off-by: Aleksei Nosachev <nos1609@hotmail.com>
 2017-05-10 14:30:43 +02:00
Toke Høiland-Jørgensen 34ed7a9f2c acme: Support running in webroot mode, detect other daemons on port 80 
For configurations where another web server is running on port 80, running
acme.sh in standalone mode fails. Try to detect this and refuse to run; and
allow the user to configure a webroot directory to use the running webserver for
certificate verification.

This also updates acme.sh to the latest version.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2017-04-26 16:32:24 +02:00
Daniel H 37f6cae850 acme: Fix for curl linked against mbed TLS. (#4254) 
Use newest acme.sh release (2.6.8).
Remove dependency on ca-certificates and add dependency on ca-bundle.
Update environment variable.

Signed-off-by: Daniel Halmschlager <da@halms.at>
 2017-04-12 22:51:57 +02:00
Toke Høiland-Jørgensen 4cebee84ca acme: Update to v1.4. 
This updates to the latest git version of acme.sh and drops the patch to
disable timestamps from the output (since that is now supported
upstream).

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2016-11-28 23:14:24 +01:00
Toke Høiland-Jørgensen 5a90e41b30 acme: Update to v1.3. 
This version handles transitioning from a previous certificate that was
issues using the staging server, adds more debug logging, and handles
state directories better if issuing fails.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2016-11-25 15:42:16 +01:00
Toke Høiland-Jørgensen feb006f202 acme: Update timestamp patch for new version. 
Fixes butched update to 1.2.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2016-11-04 19:08:35 +01:00
Toke Høiland-Jørgensen 20d7233913 acme: New version 1.2. 
This version will use the standalone (netcat) mode of acme.sh during
verification instead of exposing uhttpd to the internet for the duration
of the verification. It will also add an ip6tables rule to also support
verification over IPv6.

Also contains an updated version of acme.sh.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2016-11-04 12:43:16 +01:00
Toke Høiland-Jørgensen f3e03d6661 acme: Add Luci app 
This adds a Luci configuration app for the ACME certificate package.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2016-08-05 21:37:37 +02:00
Toke Høiland-Jørgensen a1d617bd8b acme: Add package. 
This adds a package wrapping the acme.sh script from
https://github.com/Neilpang/acme.sh in Uci config and hooks to interact
correctly with uhttpd.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2016-08-05 17:41:09 +02:00