pallavkothari/certs

stamp out letsencrypt wildcard certs using hover dns verification

LetsEncrypt wildcard certs

Using acme4j and hover at the moment.

build

./gradlew build

run

export HOVER_USERNAME=<hover_username>
export HOVER_PASSWORD=<hover_password>

# with gradle:
./gradlew run -PappArgs="['--mode','staging','--domain','*.foo.org','--domain','*.bar.foo.org']" 

# or without gradle; use the generated start script in the distro
cd build/distributions 
unzip *.zip 
cd $(ls -d */)
./bin/letsencrypt-wildcard-certs --mode staging --domain *.foo.org --domain *.bar.foo.org

Verify the cert chain

openssl x509 -in domain-chain.crt -text

Resources

• acme v2 + wildcard support goes live
• acme v2 prod endpoint
• acme v2 staging endpoint
• client options
• acme4j
• hover