--install-cronjob Install the cron job to renew certs, you don't need to call this. The 'install'command can automatically install the cron job.
@ -5038,22 +5038,22 @@ Commands:
--deactivate-account Deactivate the account.
--create-account-key Create an account private key, professional use.
--create-domain-key Create an domain private key, professional use.
--createCSR, -ccsr Create CSR, professional use.
--createCSR, -ccsr Create CSR, professional use.
--deactivate Deactivate the domain authz, professional use.
Parameters:
--domain, -d domain.tld Specifies a domain, used to issue, renew or revoke etc.
--force, -f Used to force to install or force to renew a cert immediately.
--staging, --test Use staging server, just for test.
--domain, -d domain.tld Specifies a domain, used to issue, renew or revoke, etc.
--force, -f Used to force install or renewal of a cert immediately.
--staging, --test Use staging server, just for testing.
--debug Output debug info.
--output-insecure Output all the sensitive messages. By default all the credentials/sensitive messages are hidden from the output/debug/log for secure.
--output-insecure Output all the sensitive messages. By default all the credentials/sensitive messages are hidden from the output/debug/log for security.
--webroot, -w /path/to/webroot Specifies the web root folder for web root mode.
--standalone Use standalone mode.
--stateless Use stateless mode, see: $_STATELESS_WIKI
--tls Use standalone tls mode.
--apache Use apache mode.
--dns [dns_cf|dns_dp|dns_cx|/path/to/api/file] Use dns mode or dns api.
--dnssleep [$DEFAULT_DNS_SLEEP] The time in seconds to waitfor all the txt records to take effect in dns api mode. Default $DEFAULT_DNS_SLEEP seconds.
--tls Use standalone TLS mode.
--apache Use Apache mode.
--dns [dns_cf|dns_dp|dns_cx|/path/to/api/file] Use DNS mode or DNS API.
--dnssleep [$DEFAULT_DNS_SLEEP] The time in seconds to waitfor all the txt records to take effect in DNS API mode. Default $DEFAULT_DNS_SLEEP seconds.
--keylength, -k [2048] Specifies the domain key length: 2048, 3072, 4096, 8192 or ec-256, ec-384.
--accountkeylength, -ak [2048] Specifies the account key length.
@ -5080,12 +5080,12 @@ Parameters:
--accountkey Specifies the account key path, Only valid for the '--install' command.
--days Specifies the days to renew the cert when using '--issue' command. The max value is $MAX_RENEW days.
--httpport Specifies the standalone listening port. Only valid if the server is behind a reverse proxy or load balancer.
--tlsport Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer.
--local-address Specifies the standalone/tls server listening address, in case you have multiple ip addresses.
--tlsport Specifies the standalone/TLS listening port. Only valid if the server is behind a reverse proxy or load balancer.
--local-address Specifies the standalone/TLS server listening address, in case you have multiple IP addresses.
--listraw Only used for'--list' command, list the certs in raw format.
--stopRenewOnError, -se Only valid for'--renew-all' command. Stop if one cert has error in renewal.
--insecure Do not check the server certificate, in some devices, the api server's certificate may not be trusted.
--ca-bundle Specifies the path to the CA certificate bundle to verify api server's certificate.
--insecure Do not check the server certificate, in some devices, the API server's certificate may not be trusted.
--ca-bundle Specifies the path to the CA certificate bundle to verify API server's certificate.
--ca-path Specifies directory containing CA certificates in PEM format, used by wget or curl.
--nocron Only valid for'--install' command, which means: do not install the default cron job. In this case, the certs will not be renewed automatically.
--no-color Do not output color text.
@ -5098,8 +5098,8 @@ Parameters:
--ocsp-must-staple, --ocsp Generate ocsp must Staple extension.
--always-force-new-domain-key Generate new domain key when renewal. Otherwise, the domain key is not changed by default.
--auto-upgrade [0|1] Valid for'--upgrade' command, indicating whether to upgrade automatically in future.
--listen-v4 Force standalone/tls server to listen at ipv4.
--listen-v6 Force standalone/tls server to listen at ipv6.
--listen-v4 Force standalone/TLS server to listen at IPv4.
--listen-v6 Force standalone/TLS server to listen at IPv6.
--openssl-bin Specifies a custom openssl bin location.
--use-wget Force to use wget, if you have both curl and wget installed.