acme

The OAuth2Client library has been deprecated by Google since 2018, and there is a replacement library google-auth.

https://github.com/certbot/certbot/blob/8b610239bfcf7aac06f6e36d09a5abba3ba87047/certbot-dns-google/certbot_dns_google/_internal/dns_google.py#L8

What would you like to be added

I'd like to have the option to not have the HSM pin stored in a configuration file, but instead be required to be entered manually by an operator each time the CA is started.

Why this is needed

Having HSM pins sitting on the file system weakens the security in cases of hardware being stolen.

In theory if the PIN is not known then stealing a server a

If you create a custom ICertificateAuthorityConfiguration and pass it to say a step-ca authority, with a custom port in the URL the FileSystemAccountStore tries to put the port in the directory name and fails.

Can we change from AuthorityUri to Host?

@rjkroege

As @rjkroege mentioned in rjkroege/edwood#288 tokenizing the results of the getarg function would allow for more robust parsing of the given arguments.

Jul	AUG	Sep
	09
2020	2021	2022

acme

Here are 375 public repositories matching this topic...

certbot / certbot

acmesh-official / acme.sh

nginx-proxy / acme-companion

dehydrated-io / dehydrated

go-acme / lego

win-acme / win-acme

letsencrypt / boulder

caddyserver / certmagic

smallstep / certificates

What would you like to be added

Why this is needed

hlandau / acmetool

srvrco / getssl

webprofusion / certify

natemcmaster / LettuceEncrypt

Janusec / janusec

letsencrypt / website

luisfarzati / localdots

rmbolger / Posh-ACME

letsencrypt / pebble

j-c-m / ubnt-letsencrypt

kelunik / acme-client

tnozicka / openshift-acme

robertmeta / nofrils

icing / mod_md

do-know / Crypt-LE

as / a

rjkroege / edwood

ldez / traefik-certs-dumper

evbogdanov / acme

vancluever / terraform-provider-acme-old

veeti / manuale

Improve this page

Add this topic to your repo