version=pmwiki-2.2.130 ordered=1 urlencoded=1 agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 12_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15 author=akoizumi charset=UTF-8 csum=Add dehydrated ctime=1662907962 host=138.117.22.177 name=Dehydrated.Configure rev=1 targets= text=Dehydrated is a client for signing certificates with an ACME-server (e.g. Let’s Encrypt or ZeroSSL) implemented as a relatively simple bash-script.%0a%0aIt uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed.%0a%0aOther dependencies are: cURL, sed, grep, mktemp (all found on almost any system, cURL being the only exception)%0a%0a!!! Installation%0aClone the repository from their GitHub using @@git clone https://github.com/lukas2511/dehydrated@@ on your home directory, and @@cd@@ to it, then do the following:%0a%0a* @@doas install -m0755 dehydrated /usr/local/sbin/dehydrated@@%0a* @@doas mkdir -p /etc/dehydrated@@%0a* @@doas install -m0644 docs/examples/config /etc/dehydrated/config@@%0a* @@doas install -m0644 docs/examples/domains.txt /etc/dehydrated/domains.txt@@%0a* @@doas install -m0755 docs/examples/hook.sh /etc/dehydrated/hook.sh@@%0a%0a!!! Setup%0aIn @@/etc/dehydrated/config@@ uncomment CA, CHALLENGETYPE, DOMAINS_TXT, CERTDIR, ALPNCERTDIR, ACCOUNTDIR, WELLKNOWN, KEYSIZE and LOCKFILE. Replace the value of BASEDIR to @@/etc/dehydrated@@, WELLKNOWN to @@/var/www/acme@@, CONTACT_EMAIL to your team's support address, %0a%0aAfter done, you'll have to do is running @@doas dehydrated --register --accept-terms@@%0a%0aYou can clear out the domains.txt file and start adding domains one-per-line on said file, SANs can be added at the side of the domain (i.e. example.com mail.example.com)%0a%0aTo request certificates, you should have @@httpd@@ listening on the domain in port 80 and use the same entry like with @@acme-client@@, then run @@doas dehydrated -c@@ and wait until it finishes. time=1662907962 author:1662907962=akoizumi csum:1662907962=Add dehydrated diff:1662907962:1662907962:=1,23d0%0a%3c Dehydrated is a client for signing certificates with an ACME-server (e.g. Let’s Encrypt or ZeroSSL) implemented as a relatively simple bash-script.%0a%3c %0a%3c It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed.%0a%3c %0a%3c Other dependencies are: cURL, sed, grep, mktemp (all found on almost any system, cURL being the only exception)%0a%3c %0a%3c !!! Installation%0a%3c Clone the repository from their GitHub using @@git clone https://github.com/lukas2511/dehydrated@@ on your home directory, and @@cd@@ to it, then do the following:%0a%3c %0a%3c * @@doas install -m0755 dehydrated /usr/local/sbin/dehydrated@@%0a%3c * @@doas mkdir -p /etc/dehydrated@@%0a%3c * @@doas install -m0644 docs/examples/config /etc/dehydrated/config@@%0a%3c * @@doas install -m0644 docs/examples/domains.txt /etc/dehydrated/domains.txt@@%0a%3c * @@doas install -m0755 docs/examples/hook.sh /etc/dehydrated/hook.sh@@%0a%3c %0a%3c !!! Setup%0a%3c In @@/etc/dehydrated/config@@ uncomment CA, CHALLENGETYPE, DOMAINS_TXT, CERTDIR, ALPNCERTDIR, ACCOUNTDIR, WELLKNOWN, KEYSIZE and LOCKFILE. Replace the value of BASEDIR to @@/etc/dehydrated@@, WELLKNOWN to @@/var/www/acme@@, CONTACT_EMAIL to your team's support address, %0a%3c %0a%3c After done, you'll have to do is running @@doas dehydrated --register --accept-terms@@%0a%3c %0a%3c You can clear out the domains.txt file and start adding domains one-per-line on said file, SANs can be added at the side of the domain (i.e. example.com mail.example.com)%0a%3c %0a%3c To request certificates, you should have @@httpd@@ listening on the domain in port 80 and use the same entry like with @@acme-client@@, then run @@doas dehydrated -c@@ and wait until it finishes.%0a\ No newline at end of file%0a host:1662907962=138.117.22.177