@ -1,6 +1,6 @@
#!/usr/bin/env sh #!/usr/bin/env sh
VER = 2.8.7
VER = 2.8.8
PROJECT_NAME = "acme.sh" PROJECT_NAME = "acme.sh"
@ -956,9 +956,9 @@ _dbase64() {
_checkcert( ) { _checkcert( ) {
_cf = " $1 " _cf = " $1 "
if [ " $DEBUG " ] ; then if [ " $DEBUG " ] ; then
openssl x509 -noout -text -in " $_cf "
${ ACME_OPENSSL_BIN :- openssl } " $_cf "
else else
openssl x509 -noout -text -in " $_cf " >/dev/null 2>& 1
${ ACME_OPENSSL_BIN :- openssl } " $_cf " >/dev/null 2>& 1
fi fi
} }
@ -1375,7 +1375,7 @@ toPkcs() {
domain = " $1 " domain = " $1 "
pfxPassword = " $2 " pfxPassword = " $2 "
if [ -z " $domain " ] ; then if [ -z " $domain " ] ; then
_usage " Usage: $PROJECT_ENTRY --toPkcs -d domain [--password pfx-password ] "
_usage " Usage: $PROJECT_ENTRY --to-pkcs12 --domain <domain.tld> [--password <password>] [--ecc ] "
return 1 return 1
fi fi
@ -1396,7 +1396,7 @@ toPkcs8() {
domain = " $1 " domain = " $1 "
if [ -z " $domain " ] ; then if [ -z " $domain " ] ; then
_usage " Usage: $PROJECT_ENTRY --toPkcs8 -d domain [--ecc] "
_usage " Usage: $PROJECT_ENTRY --to-pkcs8 --domain <domain.tld> [--ecc] "
return 1 return 1
fi fi
@ -1416,7 +1416,7 @@ toPkcs8() {
createAccountKey( ) { createAccountKey( ) {
_info "Creating account key" _info "Creating account key"
if [ -z " $1 " ] ; then if [ -z " $1 " ] ; then
_usage " Usage: $PROJECT_ENTRY --createAccountKey --accountkeylength 2048 "
_usage " Usage: $PROJECT_ENTRY --create-account-key [--accountkeylength <bits>] "
return return
fi fi
@ -1459,7 +1459,7 @@ _create_account_key() {
createDomainKey( ) { createDomainKey( ) {
_info "Creating domain key" _info "Creating domain key"
if [ -z " $1 " ] ; then if [ -z " $1 " ] ; then
_usage " Usage: $PROJECT_ENTRY --createDomainKey -d domain.com [ --keylength 2048 ] "
_usage " Usage: $PROJECT_ENTRY --create-domain-key --domain <domain.tld> [--keylength <bits> ] "
return return
fi fi
@ -1499,7 +1499,7 @@ createDomainKey() {
createCSR( ) { createCSR( ) {
_info "Creating csr" _info "Creating csr"
if [ -z " $1 " ] ; then if [ -z " $1 " ] ; then
_usage " Usage: $PROJECT_ENTRY --createCSR -d domain1.com [-d domain2.com -d domain3.com ... ] "
_usage " Usage: $PROJECT_ENTRY --create-csr --domain <domain.tld> [--domain <domain2.tld> ... ] "
return return
fi fi
@ -2888,7 +2888,7 @@ Allow from all
if _restoreApache; then if _restoreApache; then
_err "The apache config file is restored." _err "The apache config file is restored."
else else
_err "Sorry, T he apache config file can not be restored, please report bug."
_err "Sorry, t he apache config file can not be restored, please report bug."
fi fi
return 1 return 1
fi fi
@ -3994,7 +3994,7 @@ _check_dns_entries() {
_get_cert_issuers( ) { _get_cert_issuers( ) {
_cfile = " $1 " _cfile = " $1 "
if _contains " $( ${ ACME_OPENSSL_BIN :- openssl } help crl2pkcs7 2>& 1) " "Usage: crl2pkcs7" ; then if _contains " $( ${ ACME_OPENSSL_BIN :- openssl } help crl2pkcs7 2>& 1) " "Usage: crl2pkcs7" ; then
${ ACME_OPENSSL_BIN :- openssl } crl2pkcs7 -nocrl -certfile $_cfile | openssl pkcs7 -print_certs -text -noout | grep 'Issuer:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2
${ ACME_OPENSSL_BIN :- openssl } crl2pkcs7 -nocrl -certfile $_cfile | ${ ACME_OPENSSL_BIN :- openssl } | grep 'Issuer:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2
else else
${ ACME_OPENSSL_BIN :- openssl } x509 -in $_cfile -text -noout | grep 'Issuer:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2 ${ ACME_OPENSSL_BIN :- openssl } x509 -in $_cfile -text -noout | grep 'Issuer:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2
fi fi
@ -4006,13 +4006,18 @@ _match_issuer() {
_missuer = " $2 " _missuer = " $2 "
_fissuers = " $( _get_cert_issuers $_cfile ) " _fissuers = " $( _get_cert_issuers $_cfile ) "
_debug2 _fissuers " $_fissuers " _debug2 _fissuers " $_fissuers "
if _contains " $_fissuers " " $_missuer " ; then
return 0
fi
_fissuers = " $( echo " $_fissuers " | _lower_case) "
_missuer = " $( echo " $_missuer " | _lower_case) "
_contains " $_fissuers " " $_missuer " _contains " $_fissuers " " $_missuer "
} }
#webroot, domain domainlist keylength #webroot, domain domainlist keylength
issue( ) { issue( ) {
if [ -z " $2 " ] ; then if [ -z " $2 " ] ; then
_usage " Usage: $PROJECT_ENTRY --issue -d a.com -w /path/to/webroot/a.com/ "
_usage " Usage: $PROJECT_ENTRY --issue --domain <domain.tld> --webroot <directory> "
return 1 return 1
fi fi
if [ -z " $1 " ] ; then if [ -z " $1 " ] ; then
@ -4709,7 +4714,7 @@ $_authorizations_map"
return 1 return 1
fi fi
if [ -z " $Le_LinkOrder " ] ; then if [ -z " $Le_LinkOrder " ] ; then
Le_LinkOrder = " $( echo " $responseHeaders " | grep -i '^Location.*$' | _tail_n 1 | tr -d "\r\n" | cut -d ":" -f 2-) "
Le_LinkOrder = " $( echo " $responseHeaders " | grep -i '^Location.*$' | _tail_n 1 | tr -d "\r\n \t " | cut -d ":" -f 2-) "
fi fi
_savedomainconf "Le_LinkOrder" " $Le_LinkOrder " _savedomainconf "Le_LinkOrder" " $Le_LinkOrder "
@ -4973,7 +4978,7 @@ $_authorizations_map"
fi fi
} }
#in_out_cert out_fullchain out out_ca
#in_out_cert out_fullchain out_ca
_split_cert_chain( ) { _split_cert_chain( ) {
_certf = " $1 " _certf = " $1 "
_fullchainf = " $2 " _fullchainf = " $2 "
@ -4993,7 +4998,7 @@ _split_cert_chain() {
renew( ) { renew( ) {
Le_Domain = " $1 " Le_Domain = " $1 "
if [ -z " $Le_Domain " ] ; then if [ -z " $Le_Domain " ] ; then
_usage " Usage: $PROJECT_ENTRY --renew -d domain.com [--ecc] "
_usage " Usage: $PROJECT_ENTRY --renew --domain <domain.tld> [--ecc] "
return 1 return 1
fi fi
@ -5003,7 +5008,7 @@ renew() {
_info " $( __green " Renew: ' $Le_Domain ' " ) " _info " $( __green " Renew: ' $Le_Domain ' " ) "
if [ ! -f " $DOMAIN_CONF " ] ; then if [ ! -f " $DOMAIN_CONF " ] ; then
_info " ' $Le_Domain ' is not a issued domain, skip. "
_info " ' $Le_Domain ' is not an issued domain, skip. "
return $RENEW_SKIP return $RENEW_SKIP
fi fi
@ -5082,7 +5087,7 @@ renewAll() {
for di in " ${ CERT_HOME } " /*.*/; do for di in " ${ CERT_HOME } " /*.*/; do
_debug di " $di " _debug di " $di "
if ! [ -d " $di " ] ; then if ! [ -d " $di " ] ; then
_debug " Not directory, skip: $di "
_debug " Not a directory, skip: $di "
continue continue
fi fi
d = $( basename " $di " ) d = $( basename " $di " )
@ -5185,7 +5190,7 @@ signcsr() {
_csrfile = " $1 " _csrfile = " $1 "
_csrW = " $2 " _csrW = " $2 "
if [ -z " $_csrfile " ] || [ -z " $_csrW " ] ; then if [ -z " $_csrfile " ] || [ -z " $_csrW " ] ; then
_usage " Usage: $PROJECT_ENTRY --signcsr --csr mycsr.csr -w /path/to/webroot/a.com/ "
_usage " Usage: $PROJECT_ENTRY --sign-csr --csr <csr-file> --webroot <directory> "
return 1 return 1
fi fi
@ -5253,7 +5258,7 @@ showcsr() {
_csrfile = " $1 " _csrfile = " $1 "
_csrd = " $2 " _csrd = " $2 "
if [ -z " $_csrfile " ] && [ -z " $_csrd " ] ; then if [ -z " $_csrfile " ] && [ -z " $_csrd " ] ; then
_usage " Usage: $PROJECT_ENTRY --showcsr --csr mycsr.csr "
_usage " Usage: $PROJECT_ENTRY --show-csr --csr <csr-file> "
return 1 return 1
fi fi
@ -5370,7 +5375,7 @@ deploy() {
_hooks = " $2 " _hooks = " $2 "
_isEcc = " $3 " _isEcc = " $3 "
if [ -z " $_hooks " ] ; then if [ -z " $_hooks " ] ; then
_usage " Usage: $PROJECT_ENTRY --deploy -d domain.com --deploy-hook cpanel [--ecc] "
_usage " Usage: $PROJECT_ENTRY --deploy --domain <domain.tld> --deploy-hook <hookname> [--ecc] "
return 1 return 1
fi fi
@ -5391,7 +5396,7 @@ deploy() {
installcert( ) { installcert( ) {
_main_domain = " $1 " _main_domain = " $1 "
if [ -z " $_main_domain " ] ; then if [ -z " $_main_domain " ] ; then
_usage " Usage: $PROJECT_ENTRY --installcert -d domain.com [--ecc] [--cert-file cert-file-path] [--key-file key-file-path] [--ca-file ca-cert-file-path] [ --reloadCmd reloadCmd] [--fullchain-file fullchain-path ] "
_usage " Usage: $PROJECT_ENTRY --install-cert --domain <domain.tld> [--ecc] [--cert-file <file>] [--key-file <file>] [--ca-file <file>] [ --reloadcmd <command>] [--fullchain-file <file> ] "
return 1 return 1
fi fi
@ -5670,7 +5675,7 @@ uninstallcronjob() {
revoke( ) { revoke( ) {
Le_Domain = " $1 " Le_Domain = " $1 "
if [ -z " $Le_Domain " ] ; then if [ -z " $Le_Domain " ] ; then
_usage " Usage: $PROJECT_ENTRY --revoke -d domain.com [--ecc] "
_usage " Usage: $PROJECT_ENTRY --revoke --domain <domain.tld> [--ecc] "
return 1 return 1
fi fi
@ -5741,7 +5746,7 @@ revoke() {
remove( ) { remove( ) {
Le_Domain = " $1 " Le_Domain = " $1 "
if [ -z " $Le_Domain " ] ; then if [ -z " $Le_Domain " ] ; then
_usage " Usage: $PROJECT_ENTRY --remove -d domain.com [--ecc] "
_usage " Usage: $PROJECT_ENTRY --remove --domain <domain.tld> [--ecc] "
return 1 return 1
fi fi
@ -5901,7 +5906,7 @@ deactivate() {
_initAPI _initAPI
_debug _d_domain_list " $_d_domain_list " _debug _d_domain_list " $_d_domain_list "
if [ -z " $( echo $_d_domain_list | cut -d , -f 1) " ] ; then if [ -z " $( echo $_d_domain_list | cut -d , -f 1) " ] ; then
_usage " Usage: $PROJECT_ENTRY --deactivate -d domain.com [-d domain.com ] "
_usage " Usage: $PROJECT_ENTRY --deactivate --domain <domain.tld> [--domain <domain2.tld> ... ] "
return 1 return 1
fi fi
for _d_dm in $( echo " $_d_domain_list " | tr ',' ' ' ) ; do for _d_dm in $( echo " $_d_domain_list " | tr ',' ' ' ) ; do
@ -6361,7 +6366,7 @@ setnotify() {
_initpath _initpath
if [ -z " $_nhook $_nlevel $_nmode " ] ; then if [ -z " $_nhook $_nlevel $_nmode " ] ; then
_usage " Usage: $PROJECT_ENTRY --set-notify [--notify-hook mailgun] [--notify-level $NOTIFY_LEVEL_DEFAULT ] [--notify-mode $NOTIFY_MODE_DEFAULT "
_usage " Usage: $PROJECT_ENTRY --set-notify [--notify-hook <hookname>] [--notify-level <0|1|2|3>] [--notify-mode <0|1> ] "
_usage " $_NOTIFY_WIKI " _usage " $_NOTIFY_WIKI "
return 1 return 1
fi fi
@ -6400,146 +6405,141 @@ setnotify() {
showhelp( ) { showhelp( ) {
_initpath _initpath
version version
echo " Usage: $PROJECT_ENTRY command ...[parameters]....
echo " Usage: $PROJECT_ENTRY <command> ... [parameters ...]
Commands:Commands:
--help, -h Show this help message.
--version, -v Show version info.
-h, - -help Show this help message.
-v, - -version Show version info.
--install Install $PROJECT_NAME to your system. --install Install $PROJECT_NAME to your system.
--uninstall Uninstall $PROJECT_NAME , and uninstall the cron job. --uninstall Uninstall $PROJECT_NAME , and uninstall the cron job.
--upgrade Upgrade $PROJECT_NAME to the latest code from $PROJECT . --upgrade Upgrade $PROJECT_NAME to the latest code from $PROJECT .
--issue Issue a cert. --issue Issue a cert.
--signcsr Issue a cert from an existing csr.
--deploy Deploy the cert to your server. --deploy Deploy the cert to your server.
--install-cert Install the issued cert to apache/nginx or any other server.
--renew, -r Renew a cert.
-i, - -install-cert Install the issued cert to apache/nginx or any other server.
-r, - -renew Renew a cert.
--renew-all Renew all the certs. --renew-all Renew all the certs.
--revoke Revoke a cert. --revoke Revoke a cert.
--remove Remove the cert from list of certs known to $PROJECT_NAME . --remove Remove the cert from list of certs known to $PROJECT_NAME .
--list List all the certs. --list List all the certs.
--showcsr Show the content of a csr .
--install-cronjob Install the cron job to renew certs, you don't need to call this. The ' install' command can automatically install the cron job .
--uninstall-cronjob Uninstall the cron job. The 'uninstall' command can do this automatically .
--cron Run cron job to renew all the certs .
--toPkcs Export the certificate and key to a pfx fil e.
--toPkcs8 Convert to pkcs8 format .
--to-pkcs12 Export the certificate and key to a pfx file .
--to-pkcs8 Convert to pkcs8 format .
--sign-csr Issue a cert from an existing csr .
--show-csr Show the content of a csr .
-ccr, --create-csr Create CSR, professional us e.
--create-domain-key Create an domain private key, professional use .
--update-account Update account info. --update-account Update account info.
--register-account Register account key. --register-account Register account key.
--deactivate-account Deactivate the account. --deactivate-account Deactivate the account.
--create-account-key Create an account private key, professional use. --create-account-key Create an account private key, professional use.
--create-domain-key Create an domain private key, professional use .
--createCSR, -ccsr Create CSR , professional use .
--deactivate Deactivate the domain authz, professional use .
--install-cronjob Install the cron job to renew certs, you don't need to call this. The ' install' command can automatically install the cron job .
--uninstall-cronjob Uninstall the cron job. The 'uninstall' command can do this automatically .
--cron Run cron job to renew all the certs .
--set-notify Set the cron notification hook, level or mode. --set-notify Set the cron notification hook, level or mode.
--set-default-ca Used with '--server' , to set the default CA to use to use.
--deactivate Deactivate the domain authz, professional use.
--set-default-ca Used with '--server' , Set the default CA to use.
See: $_SERVER_WIKI
Parameters:Parameters:
--domain, -d domain.tld Specifies a domain, used to issue, renew or revoke etc.
--challenge-alias domain.tld The challenge domain alias for DNS alias mode.
-d, --domain <domain.tld> Specifies a domain, used to issue, renew or revoke etc.
--challenge-alias <domain.tld> The challenge domain alias for DNS alias mode.
See: $_DNS_ALIAS_WIKI See: $_DNS_ALIAS_WIKI
--domain-alias domain.tld The domain alias for DNS alias mode.
--domain-alias <domain.tld> The domain alias for DNS alias mode.
See: $_DNS_ALIAS_WIKI See: $_DNS_ALIAS_WIKI
--preferred-chain CHAIN If the CA offers multiple certificate chains, prefer the chain with an issuer matching this Subject Common Name.
--preferred-chain <chain> If the CA offers multiple certificate chains, prefer the chain with an issuer matching this Subject Common Name.
If no match, the default offered chain will be used. ( default: empty) If no match, the default offered chain will be used. ( default: empty)
See: $_PREFERRED_CHAIN_WIKI See: $_PREFERRED_CHAIN_WIKI
--force, -f Used to force to install or force to renew a cert immediately .
--staging, --test Use staging server, just for test.
--debug Output debug info .
-f, --force Force install, force cert renewal or override sudo restrictions .
--staging, --test Use staging server, for testing .
--debug [ 0| 1| 2| 3] Output debug info. Defaults to 1 if argument is omitted
--output-insecure Output all the sensitive messages. --output-insecure Output all the sensitive messages.
By default all the credentials/sensitive messages are hidden from the output/debug/log for security. By default all the credentials/sensitive messages are hidden from the output/debug/log for security.
--webroot, -w /path/to/webroot Specifies the web root folder for web root mode.
-w, --webroot <directory> Specifies the web root folder for web root mode.
--standalone Use standalone mode. --standalone Use standalone mode.
--alpn Use standalone alpn mode. --alpn Use standalone alpn mode.
--stateless Use stateless mode. --stateless Use stateless mode.
See: $_STATELESS_WIKI See: $_STATELESS_WIKI
--apache Use apache mode. --apache Use apache mode.
--dns [ dns_hook] Use dns mode or dns api.
--dns [ dns_hook] Use dns manual m ode or dns api. Defaults to manual mode when argument is omitted.
See: $_DNS_API_WIKI See: $_DNS_API_WIKI
--dnssleep 300 The time in seconds to wait for all the txt records to propagate in dns api mode.
--dnssleep <seconds> The time in seconds to wait for all the txt records to propagate in dns api mode.
It' s not necessary to use this by default, $PROJECT_NAME polls dns status by DOH automatically. It' s not necessary to use this by default, $PROJECT_NAME polls dns status by DOH automatically.
--keylength, -k [ 2048] Specifies the domain key length: 2048, 3072, 4096, 8192 or ec-256, ec-384, ec-521.
--accountkeylength, -ak [ 2048] Specifies the account key length: 2048, 3072, 4096
--log [ /path/to/logfile] Specifies the log file. The default is: \" $DEFAULT_LOG_FILE \" if you don' t give a file path here.
--log-level 1| 2 Specifies the log level, default is 1.
--syslog [ 0| 3| 6| 7] Syslog level, 0: disable syslog, 3: error, 6: info, 7: debug.
--eab-kid EAB_KID Key Identifier for External Account Binding.
--eab-hmac-key EAB_HMAC_KEY HMAC key for External Account Binding.
-k, --keylength <bits> Specifies the domain key length: 2048, 3072, 4096, 8192 or ec-256, ec-384, ec-521.
-ak, --accountkeylength <bits> Specifies the account key length: 2048, 3072, 4096
--log [ file] Specifies the log file. Defaults to \" $DEFAULT_LOG_FILE \" if argument is omitted.
--log-level <1| 2> Specifies the log level, default is 1.
--syslog <0| 3| 6| 7> Syslog level, 0: disable syslog, 3: error, 6: info, 7: debug.
--eab-kid <eab_key_id> Key Identifier for External Account Binding.
--eab-hmac-key <eab_hmac_key> HMAC key for External Account Binding.
These parameters are to install the cert to nginx/apache or any other server after issue/renew a cert: These parameters are to install the cert to nginx/apache or any other server after issue/renew a cert:
--cert-file After issue/renew, the cert will be copied to this path.
--key-file After issue/renew, the key will be copied to this path.
--ca-file After issue/renew, the intermediate cert will be copied to this path.
--fullchain-file After issue/renew, the fullchain cert will be copied to this path.
--reloadcmd \" service nginx reload\" After issue/renew, it' s used to reload the server.
--cert-file <file> Path to copy the cert file to after issue/renew..
--key-file <file> Path to copy the key file to after issue/renew.
--ca-file <file> Path to copy the intermediate cert file to after issue/renew.
--fullchain-file <file> Path to copy the fullchain cert file to after issue/renew.
--reloadcmd <command> Command to execute after issue/renew to reload the server.
--server SERVER ACME Directory Resource URI. ( default: $DEFAULT_CA )
--server <server_uri> ACME Directory Resource URI. ( default: $DEFAULT_CA )
See: $_SERVER_WIKI See: $_SERVER_WIKI
--accountconf Specifies a customized account config file.
--home Specifies the home dir for $PROJECT_NAME .
--cert-home Specifies the home dir to save all the certs, only valid for '--install' command.
--config-home Specifies the home dir to save all the configurations.
--useragent Specifies the user agent string. it will be saved for future use too.
--accountemail, -m Specifies the account email, only valid for the '--install' and '--update-account' command.
--accountkey Specifies the account key path, only valid for the '--install' command.
--days Specifies the days to renew the cert when using '--issue' command. The default value is $DEFAULT_RENEW days.
--httpport Specifies the standalone listening port. Only valid if the server is behind a reverse proxy or load balancer.
--tlsport Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer.
--local-address Specifies the standalone/tls server listening address, in case you have multiple ip addresses.
--accountconf <file> Specifies a customized account config file.
--home <directory> Specifies the home dir for $PROJECT_NAME .
--cert-home <directory> Specifies the home dir to save all the certs, only valid for '--install' command.
--config-home <directory> Specifies the home dir to save all the configurations.
--useragent <string> Specifies the user agent string. it will be saved for future use too.
-m, --accountemail <email> Specifies the account email, only valid for the '--install' and '--update-account' command.
--accountkey <file> Specifies the account key path, only valid for the '--install' command.
--days <ndays> Specifies the days to renew the cert when using '--issue' command. The default value is $DEFAULT_RENEW days.
--httpport <port> Specifies the standalone listening port. Only valid if the server is behind a reverse proxy or load balancer.
--tlsport <port> Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer.
--local-address <ip> Specifies the standalone/tls server listening address, in case you have multiple ip addresses.
--listraw Only used for '--list' command, list the certs in raw format. --listraw Only used for '--list' command, list the certs in raw format.
--stopRenewOnError, -se Only valid for '--renew-all' command. Stop if one cert has error in renewal.
-se, --stop-renew-on-error Only valid for '--renew-all' command. Stop if one cert has error in renewal.
--insecure Do not check the server certificate, in some devices, the api server' s certificate may not be trusted. --insecure Do not check the server certificate, in some devices, the api server' s certificate may not be trusted.
--ca-bundle Specifies the path to the CA certificate bundle to verify api server' s certificate.
--ca-path Specifies directory containing CA certificates in PEM format, used by wget or curl.
--ca-bundle <file> Specifies the path to the CA certificate bundle to verify api server' s certificate.
--ca-path <directory> Specifies directory containing CA certificates in PEM format, used by wget or curl.
--nocron Only valid for '--install' command, which means: do not install the default cron job. --nocron Only valid for '--install' command, which means: do not install the default cron job.
In this case , the certs will not be renewed automatically. In this case , the certs will not be renewed automatically.
--noprofile Only valid for '--install' command, which means: do not install aliases to user profile. --noprofile Only valid for '--install' command, which means: do not install aliases to user profile.
--no-color Do not output color text. --no-color Do not output color text.
--force-color Force output of color text. Useful for non-interactive use with the aha tool for HTML E-Mails. --force-color Force output of color text. Useful for non-interactive use with the aha tool for HTML E-Mails.
--ecc Specifies to use the ECC cert. Valid for '--install-cert' , '--renew' , '--revoke' , '--toPkcs' and '--createCSR '
--csr Specifies the input csr.
--pre-hook Command to be run before obtaining any certificates.
--post-hook Command to be run after attempting to obtain/renew certificates. No matter the obtain/renew is success or failed.
--renew-hook Command to be run once for each successfully renewed certificate.
--deploy-hook The hook file to deploy cert
--ocsp-must-staple, --ocsp Generate ocsp must Staple extension.
--always-force-new-domain-key Generate new domain key whe n renewal. Otherwise, the domain key is not changed by default.
--auto-upgrade [ 0| 1] Valid for '--upgrade' command, indicating whether to upgrade automatically in future.
--ecc Specifies to use the ECC cert. Valid for '--install-cert' , '--renew' , '--revoke' , '--to-pkcs12' and '--create-csr '
--csr <file> Specifies the input csr.
--pre-hook <command> Command to be run before obtaining any certificates.
--post-hook <command> Command to be run after attempting to obtain/renew certificates. Runs regardless of whether obtain/renew succeeded or failed.
--renew-hook <command> Command to be run after each successfully renewed certificate.
--deploy-hook <hookname> The hook file to deploy cert
--ocsp, --ocsp-must-staple Generate OCSP-Must- Staple extension.
--always-force-new-domain-key Generate new domain key o n renewal. Otherwise, the domain key is not changed by default.
--auto-upgrade [ 0| 1] Valid for '--upgrade' command, indicating whether to upgrade automatically in future. Defaults to 1 if argument is omitted.
--listen-v4 Force standalone/tls server to listen at ipv4. --listen-v4 Force standalone/tls server to listen at ipv4.
--listen-v6 Force standalone/tls server to listen at ipv6. --listen-v6 Force standalone/tls server to listen at ipv6.
--openssl-bin Specifies a custom openssl bin location.
--openssl-bin <file> Specifies a custom openssl bin location.
--use-wget Force to use wget, if you have both curl and wget installed. --use-wget Force to use wget, if you have both curl and wget installed.
--yes-I-know-dns-manual-mode-enough-go-ahead-please Force to use dns manual mode.
--yes-I-know-dns-manual-mode-enough-go-ahead-please Force use of dns manual mode.
See: $_DNS_MANUAL_WIKI See: $_DNS_MANUAL_WIKI
--branch, -b Only valid for '--upgrade' command, specifies the branch name to upgrade to.
--notify-level 0| 1| 2| 3 Set the notification level: Default value is $NOTIFY_LEVEL_DEFAULT .
0: disabled, no notification will be sent.
1: send notifications only when there is an error.
2: send notifications when a cert is successfully renewed, or there is an error.
3: send notifications when a cert is skipped, renewed, or error.
--notify-mode 0| 1 Set notification mode. Default value is $NOTIFY_MODE_DEFAULT .
0: Bulk mode. Send all the domain' s notifications in one message( mail) .
1: Cert mode. Send a message for every single cert.
--notify-hook [ hookname] Set the notify hook
--revoke-reason [ 0-10] The reason for '--revoke' command.
-b, --branch <branch> Only valid for '--upgrade' command, specifies the branch name to upgrade to.
--notify-level <0| 1| 2| 3> Set the notification level: Default value is $NOTIFY_LEVEL_DEFAULT .
0: disabled, no notification will be sent.
1: send notifications only when there is an error.
2: send notifications when a cert is successfully renewed, or there is an error.
3: send notifications when a cert is skipped, renewed, or error.
--notify-mode <0| 1> Set notification mode. Default value is $NOTIFY_MODE_DEFAULT .
0: Bulk mode. Send all the domain' s notifications in one message( mail) .
1: Cert mode. Send a message for every single cert.
--notify-hook <hookname> Set the notify hook
--revoke-reason <0-10> The reason for revocation, can be used in conjunction with the '--revoke' command.
See: $_REVOKE_WIKI See: $_REVOKE_WIKI
--password <password> Add a password to exported pfx file. Use with --to-pkcs12.
" "
} }
@ -6797,19 +6797,19 @@ _process() {
--deploy) --deploy)
_CMD = "deploy" _CMD = "deploy"
; ; ; ;
--signcsr)
--sign-csr | --sign csr)
_CMD = "signcsr" _CMD = "signcsr"
; ; ; ;
--showcsr)
--show-csr | --show csr)
_CMD = "showcsr" _CMD = "showcsr"
; ; ; ;
-- installcert | -i | --install- cert)
-i | - -install-cert | --installcert)
_CMD = "installcert" _CMD = "installcert"
; ; ; ;
--renew | -r) --renew | -r)
_CMD = "renew" _CMD = "renew"
; ; ; ;
--renewAll | --renewall | --renew- all)
--renew-all | --renewAll | --renew all)
_CMD = "renewAll" _CMD = "renewAll"
; ; ; ;
--revoke) --revoke)
@ -6821,37 +6821,37 @@ _process() {
--list) --list)
_CMD = "list" _CMD = "list"
; ; ; ;
--installcronjob | --install- cronjob)
--install- cronjob | --installcronjob)
_CMD = "installcronjob" _CMD = "installcronjob"
; ; ; ;
--uninstallcronjob | --uninstall- cronjob)
--uninstall- cronjob | --uninstallcronjob)
_CMD = "uninstallcronjob" _CMD = "uninstallcronjob"
; ; ; ;
--cron) --cron)
_CMD = "cron" _CMD = "cron"
; ; ; ;
--toPkcs)
--to-pkcs12 | --to-pkcs | --to Pkcs)
_CMD = "toPkcs" _CMD = "toPkcs"
; ; ; ;
--toPkcs8)
--to-pkcs8 | --to Pkcs8)
_CMD = "toPkcs8" _CMD = "toPkcs8"
; ; ; ;
--createAccountKey | --createaccountkey | -cak | --create-account-key )
--create-account-key | --create AccountKey | --createaccountkey | -cak)
_CMD = "createAccountKey" _CMD = "createAccountKey"
; ; ; ;
--createDomainKey | --createdomainkey | -cdk | --create-domain-key )
--create-domain-key | --create DomainKey | --createdomainkey | -cdk)
_CMD = "createDomainKey" _CMD = "createDomainKey"
; ; ; ;
--createCSR | --createcsr | -cc r)
-ccr | --create-csr | - -createCSR | --createcsr)
_CMD = "createCSR" _CMD = "createCSR"
; ; ; ;
--deactivate) --deactivate)
_CMD = "deactivate" _CMD = "deactivate"
; ; ; ;
--updateaccount | --update- account)
--update- account | --updateaccount)
_CMD = "updateaccount" _CMD = "updateaccount"
; ; ; ;
--registeraccount | --register- account)
--register- account | --registeraccount)
_CMD = "registeraccount" _CMD = "registeraccount"
; ; ; ;
--deactivate-account) --deactivate-account)
@ -6863,7 +6863,7 @@ _process() {
--set-default-ca) --set-default-ca)
_CMD = "setdefaultca" _CMD = "setdefaultca"
; ; ; ;
-- domain | -d)
-d | -- domain )
_dvalue = " $2 " _dvalue = " $2 "
if [ " $_dvalue " ] ; then if [ " $_dvalue " ] ; then
@ -6894,7 +6894,7 @@ _process() {
shift shift
; ; ; ;
-- force | -f)
-f | -- force )
FORCE = "1" FORCE = "1"
; ; ; ;
--staging | --test) --staging | --test)
@ -6916,7 +6916,7 @@ _process() {
--output-insecure) --output-insecure)
export OUTPUT_INSECURE = 1 export OUTPUT_INSECURE = 1
; ; ; ;
-- webroot | -w)
-w | -- webroot )
wvalue = " $2 " wvalue = " $2 "
if [ -z " $_webroot " ] ; then if [ -z " $_webroot " ] ; then
_webroot = " $wvalue " _webroot = " $wvalue "
@ -7006,7 +7006,7 @@ _process() {
_keylength = " $2 " _keylength = " $2 "
shift shift
; ; ; ;
-- account keylength | -ak)
-ak | -- account keylength )
_accountkeylength = " $2 " _accountkeylength = " $2 "
shift shift
; ; ; ;
@ -7044,7 +7044,7 @@ _process() {
LE_WORKING_DIR = " $2 " LE_WORKING_DIR = " $2 "
shift shift
; ; ; ;
--certhome | --cert- home)
--cert- home | --certhome)
_certhome = " $2 " _certhome = " $2 "
CERT_HOME = " $_certhome " CERT_HOME = " $_certhome "
shift shift
@ -7059,7 +7059,7 @@ _process() {
USER_AGENT = " $_useragent " USER_AGENT = " $_useragent "
shift shift
; ; ; ;
--accounte mail | -m)
-m | --accounte mail )
_accountemail = " $2 " _accountemail = " $2 "
ACCOUNT_EMAIL = " $_accountemail " ACCOUNT_EMAIL = " $_accountemail "
shift shift
@ -7087,7 +7087,7 @@ _process() {
--listraw) --listraw)
_listraw = "raw" _listraw = "raw"
; ; ; ;
--stopRenewOnError | --stoprenewonerror | -se )
-se | --stop-renew-on-error | - -stopRenewOnError | --stoprenewonerror)
_stopRenewOnError = "1" _stopRenewOnError = "1"
; ; ; ;
--insecure) --insecure)
flywithu
5 years ago
GitHub