acme

Documentation

Overview

Package acme provides a means of performing Let's Encrypt DNS challenges via a DNSConfig

Index

• Constants
• Variables
• type Account
  • func (a *Account) GetEmail() string
  • func (a *Account) GetPrivateKey() crypto.PrivateKey
  • func (a *Account) GetRegistration() *acme.RegistrationResource
• type CertConfig
• type Client
  • func New(cfg *models.DNSConfig, directory string, email string, server string) (Client, error)
  • func NewVault(cfg *models.DNSConfig, vaultPath string, email string, server string) (Client, error)
• type Storage

Constants

const (
	LetsEncryptLive  = "https://acme-v02.api.letsencrypt.org/directory"
	LetsEncryptStage = "https://acme-staging-v02.api.letsencrypt.org/directory"
)

Variables

var IgnoredProviders = map[string]bool{}

IgnoredProviders is a lit of provider names that should not be used to fill challenges.

Types

type Account

type Account struct {
	Email string `json:"email"`

	Registration *acme.RegistrationResource `json:"registration"`
	// contains filtered or unexported fields
}

func (*Account) GetEmail

func (a *Account) GetEmail() string

func (*Account) GetPrivateKey

func (a *Account) GetPrivateKey() crypto.PrivateKey

func (*Account) GetRegistration

func (a *Account) GetRegistration() *acme.RegistrationResource

type CertConfig

type CertConfig struct {
	CertName string   `json:"cert_name"`
	Names    []string `json:"names"`
	UseECC   bool     `json:"use_ecc"`
}

type Client

type Client interface {
	IssueOrRenewCert(config *CertConfig, renewUnder int, verbose bool) (bool, error)
}

func New

func New(cfg *models.DNSConfig, directory string, email string, server string) (Client, error)

func NewVault

func NewVault(cfg *models.DNSConfig, vaultPath string, email string, server string) (Client, error)

type Storage

type Storage interface {
	// Get Existing certificate, or return nil if it does not exist
	GetCertificate(name string) (*acme.CertificateResource, error)
	StoreCertificate(name string, cert *acme.CertificateResource) error

	GetAccount(acmeHost string) (*Account, error)
	StoreAccount(acmeHost string, account *Account) error
}

Storage is an abstracrion around how certificates, keys, and account info are stored on disk or elsewhere.