Tools for distributing ssl certificates
Designed for FreeBSD (it uses fetch, not wget or curl [yet]).
It also uses sudo, with the goal of this running as non-root
and only allowing the cp & mv via sudo.
These tools were designed with acme.sh & Let's Encrypt in mind,
but they should with with any certificates generated by any
means.
===> The following configuration options are available for anvil-0.0.20:
====> Options available for the single SG1: you have to select exactly one of them
FETCH=on: Use fetch
CURL=off: Use curl, not fetch
WGET=off: Use wget, not fetch
===> Use 'make config' to modify these settings
After installing anvil, this is a short checklist of things to do, depending
on which tools are using.
For cert-puller:
* adjust /usr/local/etc/anvil/cert-puller.conf
* run 'cert-puller -s' to see the visudo settings you need
* adjust the service configuration files (e.g. httpd.conf) if cert filenames
are different from defaults. By default, anvil uses:
* example.org.fullchain.cer
* example.org.key
* anvil does not distribute .key files. Do that manually.
* install the crontab for anvil: sudo crontab -u anvil -e
###
# use /bin/sh to run commands, overriding the default set by cron
SHELL=/bin/sh
# mail any output to here, no matter whose crontab this is
MAILTO=you@example.org
7 13 * * * /usr/local/bin/cert-puller
###
For cert-shifter:
* adjust /usr/local/etc/anvil/cert-shifter.conf
* install the crontab for anvil: sudo crontab -u anvil -e
###
# use /bin/sh to run commands, overriding the default set by cron
SHELL=/bin/sh
# mail any output to here, no matter whose crontab this is
MAILTO=you@example.org
19 20 * * * /usr/local/bin/cert-shifter
###
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Update to 0.0.18
Allow user to specify which services need to be restarted or reloaded.
Provide settings to allow options to be used with fetch, curl, wget. e.g. -4
re: https://github.com/dlangille/anvil/releases/tag/0.0.18
Upgrade to 0.0.17
Ignore the DAYS configuration item for cert-shifter. It is now no longer
used.
Why? Because we cannot depend upon the mtime of a directory to indicate that
it contains a new file. Instead, we must look at the certs contained within
those directories.
