anvil

anvil copied to clipboard

What about periodic instead of cron job?

1

How about creating a periodic script as an alternative to the cron job?

dlangille

cert-shifter not working with ecc certs. trivial name/directory pattern mismatch

7

THe ecc certs issues from acme.sh have a cifferent naming scheme. the directory name is /var/db/acme/certs/example.com_ecc/ but the cert name is example.com.cer and NOT example.com_ecc.cer. I think this can be...

tzauner

Use with wildcard certificates?

2

I have some *.example.com wildcard certificates which have been problematic when running through cert-shifter (I assume because of the leading asterisk). I've worked around by placing if echo $cert |...

dhicksdrh

cert-puller tries to install certs no longer listed in .conf file

3

Downloaded certs are stored in `/var/db/anvil` (or `DOWNLOAD_DIR`). If you remove a cert from the .conf file, `cert-puller` will no longer attempt to fetch that cert. When modifying the .conf...

dlangille

cert-shifter starts failing is not run within 24 hours of an update

2

The find used by cert-shifter checks for changes which occurred in the past 24 hours (1 d) see https://github.com/dlangille/anvil/blob/master/cert-shifter#L31 ``` DIRS=`${FIND} ${CERT_SRC} -mtime -1 -type d -d 1` ``` I...

dlangille

At present, the code assumes these filenames are used: * example.org.fullchain.cer * example.org.key * ca.cer Perhaps this should be configurable on a per-installation basis.

dlangille

if anvil can't read the already installed cert, it will always replace them

1

If /usr/local/etc/ssl is chmod 740 and chown root:wheel, anvil will not be able to read the certs. Therefore, the diff fails silently, and it always installs the certs. proposed solution:...

dlangille

After installing, the certs are chown anvil:anvil Really, they should be chown root:wheel

dlangille