db856b6175
On September the 29th, the certificate for R3, the intermediate
CA of Let's Encrypt expired, followed by the root CA expiration
on September the 30th. Update the acme client to 3.0.1,
to make sure newly generated certificates are using the new CA.
This is a backport of 468fc5fca4.
https://github.com/openwrt/packages/pull/16801
Default to letsencrypt because the upstream default may change.
Passing --staging is no longer needed, since --serever will
select a staging server if needed.
Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
Tested-by: Georgi Valkov <gvalkov@abv.bg>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
83 lines
2 KiB
Makefile
83 lines
2 KiB
Makefile
#
|
|
# Copyright (C) 2016 Toke Høiland-Jørgensen
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v3 or
|
|
# later.
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=acme
|
|
PKG_VERSION:=3.0.1
|
|
PKG_RELEASE:=1
|
|
|
|
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
|
|
PKG_SOURCE_URL:=https://codeload.github.com/acmesh-official/acme.sh/tar.gz/$(PKG_VERSION)?
|
|
PKG_HASH:=6212cc0c2bca99a7dd6cbb4236b4c7dd5d1113dab0841e66dae4d307d902a8e6
|
|
PKG_BUILD_DIR:=$(BUILD_DIR)/acme.sh-$(PKG_VERSION)
|
|
|
|
PKG_MAINTAINER:=Toke Høiland-Jørgensen <toke@toke.dk>
|
|
PKG_LICENSE:=GPL-3.0-only
|
|
PKG_LICENSE_FILES:=LICENSE.md
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/acme
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
DEPENDS:=+wget-ssl +ca-bundle +openssl-util +socat
|
|
TITLE:=ACME (Letsencrypt) client
|
|
URL:=https://acme.sh
|
|
PKGARCH:=all
|
|
endef
|
|
|
|
define Package/acme/description
|
|
A client for issuing Letsencrypt certificates.
|
|
endef
|
|
|
|
define Package/acme/conffiles
|
|
/etc/config/acme
|
|
/etc/acme
|
|
endef
|
|
|
|
define Build/Configure
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
define Package/acme/install
|
|
$(INSTALL_DIR) $(1)/etc/acme
|
|
$(INSTALL_DIR) $(1)/etc/config
|
|
$(INSTALL_CONF) ./files/acme.config $(1)/etc/config/acme
|
|
$(INSTALL_DIR) $(1)/etc/init.d
|
|
$(INSTALL_BIN) ./files/acme.init $(1)/etc/init.d/acme
|
|
$(INSTALL_DIR) $(1)/usr/lib/acme
|
|
$(INSTALL_BIN) ./files/run.sh $(1)/usr/lib/acme/run-acme
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/acme.sh $(1)/usr/lib/acme/acme.sh
|
|
endef
|
|
|
|
define Package/acme/prerm
|
|
#!/bin/sh
|
|
sed -i '/\/etc\/init\.d\/acme start/d' /etc/crontabs/root
|
|
endef
|
|
|
|
define Package/acme-dnsapi
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
DEPENDS:=+acme
|
|
TITLE:=DNS API integration for ACME (Letsencrypt) client
|
|
PKGARCH:=all
|
|
endef
|
|
|
|
define Package/acme-dnsapi/description
|
|
This package provides DNS API integration for ACME (Letsencrypt) client.
|
|
endef
|
|
|
|
define Package/acme-dnsapi/install
|
|
$(INSTALL_DIR) $(1)/usr/lib/acme/dnsapi
|
|
$(INSTALL_DATA) $(PKG_BUILD_DIR)/dnsapi/*.sh $(1)/usr/lib/acme/dnsapi
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,acme))
|
|
$(eval $(call BuildPackage,acme-dnsapi))
|