acme-client(1) moves to Let's Encrypt v02 API

Contributed by rueda on 2019-06-07 from the wiley-coyote-and-acme-rockets-go-meep-meep dept.

Florian Obser (florian@) has committed the changes required to move acme-client(1) in -current to the RFC 8555 protocol used by the Let's Encrypt v02 API:

CVSROOT:	/cvs
Module name:	src
Changes by:	florian@cvs.openbsd.org	2019/06/07 02:07:52

Modified files:
	usr.sbin/acme-client: acctproc.c acme-client.1 certproc.c 
	                      extern.h http.c http.h json.c main.c 
	                      netproc.c 

Log message:
Implement RFC 8555 "Automatic Certificate Management Environment
(ACME)" to be able to talk to the v02 Let's Encrypt API.

With this acme-client(1) will no longer be able to talk to the v01
API. Users must change the api url in /etc/acme-client.conf to
https://acme-v02.api.letsencrypt.org/directory
Existing accounts (and certs of course) stay valid and after the url
change acme-client will be able to renew certs.

Tested by Renaud Allard and benno
Input & OK benno

Let's Encrypt has already announced its "End of Life Plan for ACMEv1".

(Comments are closed)

Comments

By Matt (DaMattster) on 2019-06-08 20:51

Does this mean that this new version of acme-client will support wildcard certificates?
Comments
1. By Alen Mistric (alenmeister) alen@mistric.no on 2019-06-11 06:05
  
  Indeed it does! Been waiting for this, finally. Big ups to florian@
  Comments
  1. By Matt (DaMattster) matt.schwartz01@gmail.com on 2019-06-11 14:18
    
    Soweeeeet!
  2. By Renaud Allard (renaud) renaud@allard.it on 2019-06-18 09:04
    
    No, it does not support wildcard certs yet, you need to use the DNS API for that and no code is in there yet.
    
    But it now supports ECDSA account and domain keys.

Latest Articles

Mon, Oct 14
- 07:05 sshd(8) splitting continues (0)
- 06:02 OpenSMTPD 7.6.0p0 Released (0)
Mon, Oct 07
- 20:42 OpenBSD 7.6 Released (1)
Wed, Sep 25
- 11:09 Major change to sysupgrade(8) behaviour (0)
Tue, Sep 24
- 16:38 OpenBSD -current is now "7.6-current" (0)
- 10:57 OpenBSD now enforcing no invalid NUL characters in shell scripts (0)
- 09:21 EuroBSDCon 2024 presentations (0)
Mon, Sep 23
- 18:02 rpki-client 9.3 released (0)
Sat, Sep 21
- 18:11 OpenSSH 9.9 released! (0)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]