shell909090 / acme-tiny

A tiny script to issue and renew TLS certs from Let's Encrypt

acme

Basically based on https://github.com/diafygi/acme-tiny, but re-wrote.

how to use

1. Create account key.

openssl genrsa 4096 > account.key

2. Create domain key.

openssl genrsa 4096 > domain.key

3. Put them into a config file. You can find an example in config.json.

4. Run python acme.py -c config.json.

validators

file

Based on http-01, have two parameters:

• path: the well-known path.
• nocheck: don't check if the response file has been put into the right place.

Mapping example for nginx:

server {
    listen 80;
    server_name yoursite.com www.yoursite.com;

    location /.well-known/acme-challenge/ {
        alias /var/www/challenges/;
        try_files $uri =404;
    }

    ...the rest of your config
}