You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

96 lines
2.5 KiB

8 years ago
8 years ago
8 years ago
8 years ago
8 years ago
8 years ago
8 years ago
8 years ago
8 years ago
  1. # Using deploy api
  2. Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert).
  3. Here are the scripts to deploy the certs/key to the server/services.
  4. ## 1. Deploy the certs to your cpanel host.
  5. (cpanel deploy hook is not finished yet, this is just an example.)
  6. Then you can deploy now:
  7. ```sh
  8. export DEPLOY_CPANEL_USER=myusername
  9. export DEPLOY_CPANEL_PASSWORD=PASSWORD
  10. acme.sh --deploy -d example.com --deploy-hook cpanel
  11. ```
  12. ## 2. Deploy ssl cert on kong proxy engine based on api.
  13. Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert).
  14. (TODO)
  15. ## 3. Deploy the cert to remote server through SSH access.
  16. (TODO)
  17. ## 4. Deploy the cert to local vsftpd server.
  18. ```sh
  19. acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd
  20. ```
  21. The default vsftpd conf file is `/etc/vsftpd.conf`, if your vsftpd conf is not in the default location, you can specify one:
  22. ```sh
  23. export DEPLOY_VSFTPD_CONF="/etc/vsftpd.conf"
  24. acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd
  25. ```
  26. The default command to restart vsftpd server is `service vsftpd restart`, if it doesn't work, you can specify one:
  27. ```sh
  28. export DEPLOY_VSFTPD_RELOAD="/etc/init.d/vsftpd restart"
  29. acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd
  30. ```
  31. ## 5. Deploy the cert to local exim4 server.
  32. ```sh
  33. acme.sh --deploy -d ftp.example.com --deploy-hook exim4
  34. ```
  35. The default exim4 conf file is `/etc/exim/exim.conf`, if your exim4 conf is not in the default location, you can specify one:
  36. ```sh
  37. export DEPLOY_EXIM4_CONF="/etc/exim4/exim4.conf.template"
  38. acme.sh --deploy -d ftp.example.com --deploy-hook exim4
  39. ```
  40. The default command to restart exim4 server is `service exim4 restart`, if it doesn't work, you can specify one:
  41. ```sh
  42. export DEPLOY_EXIM4_RELOAD="/etc/init.d/exim4 restart"
  43. acme.sh --deploy -d ftp.example.com --deploy-hook exim4
  44. ```
  45. ## 6. Deploy the cert to OSX Keychain
  46. ```sh
  47. acme.sh --deploy -d ftp.example.com --deploy-hook keychain
  48. ```
  49. ## 7. Deploy the cert to remote routeros
  50. ```sh
  51. acme.sh --deploy -d ftp.example.com --deploy-hook routeros
  52. ```
  53. Before you can deploy the certificate to router os, you need to add the id_rsa.pub key to the routeros and assign a user to that key.
  54. The user need to have access to ssh, ftp, read and write.
  55. Then you need to set the environment variables for the deploy script to work.
  56. ```sh
  57. export ROUTER_OS_USERNAME=certuser
  58. export ROUTER_OS_HOST=router.example.com
  59. acme.sh --deploy -d ftp.example.com --deploy-hook routeros
  60. ```