Compare commits
No commits in common. "cd48c624fa75787befcf653f94a0c0dc492b148f" and "b12a1a7ea4c83372f3ebeb1cc0349e81374455a4" have entirely different histories.
cd48c624fa
...
b12a1a7ea4
|
@ -23,11 +23,10 @@ In progress
|
||||||
* Mar 20, 2018 - SUCCESS - got a test certificate (hard-coded)
|
* Mar 20, 2018 - SUCCESS - got a test certificate (hard-coded)
|
||||||
* Mar 21, 2018 - can now accept values (not hard coded)
|
* Mar 21, 2018 - can now accept values (not hard coded)
|
||||||
* Mar 21, 2018 - *mostly* matches le-acme-core.js API
|
* Mar 21, 2018 - *mostly* matches le-acme-core.js API
|
||||||
* Apr 5, 2018 - completely match api for acme v1 (le-acme-core.js)
|
|
||||||
|
|
||||||
Todo
|
Todo
|
||||||
|
|
||||||
* test wildcard
|
* completely match api for acme v1 (le-acme-core.js)
|
||||||
* test http and dns challenges
|
* test http and dns challenges
|
||||||
* export http and dns challenge tests
|
* export http and dns challenge tests
|
||||||
* support ECDSA keys
|
* support ECDSA keys
|
||||||
|
|
14
node.js
14
node.js
|
@ -9,11 +9,6 @@
|
||||||
var ACME = module.exports.ACME = {};
|
var ACME = module.exports.ACME = {};
|
||||||
|
|
||||||
ACME.acmeChallengePrefix = '/.well-known/acme-challenge/';
|
ACME.acmeChallengePrefix = '/.well-known/acme-challenge/';
|
||||||
ACME.acmeChallengeDnsPrefix = '_acme-challenge';
|
|
||||||
ACME.acmeChallengePrefixes = {
|
|
||||||
'http-01': '/.well-known/acme-challenge/'
|
|
||||||
, 'dns-01': '_acme-challenge'
|
|
||||||
};
|
|
||||||
|
|
||||||
ACME._getUserAgentString = function (deps) {
|
ACME._getUserAgentString = function (deps) {
|
||||||
var uaDefaults = {
|
var uaDefaults = {
|
||||||
|
@ -373,7 +368,6 @@ ACME._getCertificate = function (me, options) {
|
||||||
|
|
||||||
console.log('[acme-v2] certificates.create');
|
console.log('[acme-v2] certificates.create');
|
||||||
return ACME._getNonce(me).then(function () {
|
return ACME._getNonce(me).then(function () {
|
||||||
console.log("27 &#&#&#&#&#&#&&##&#&#&#&#&#&#&#&");
|
|
||||||
var body = {
|
var body = {
|
||||||
identifiers: options.domains.map(function (hostname) {
|
identifiers: options.domains.map(function (hostname) {
|
||||||
return { type: "dns" , value: hostname };
|
return { type: "dns" , value: hostname };
|
||||||
|
@ -407,11 +401,6 @@ ACME._getCertificate = function (me, options) {
|
||||||
me._finalize = resp.body.finalize;
|
me._finalize = resp.body.finalize;
|
||||||
//console.log('[DEBUG] finalize:', me._finalize); return;
|
//console.log('[DEBUG] finalize:', me._finalize); return;
|
||||||
|
|
||||||
if (!me._authorizations) {
|
|
||||||
console.log("&#&#&#&#&#&#&&##&#&#&#&#&#&#&#&");
|
|
||||||
}
|
|
||||||
console.log("47 &#&#&#&#&#&#&&##&#&#&#&#&#&#&#&");
|
|
||||||
|
|
||||||
//return resp.body;
|
//return resp.body;
|
||||||
return Promise.all(me._authorizations.map(function (authUrl, i) {
|
return Promise.all(me._authorizations.map(function (authUrl, i) {
|
||||||
console.log("Authorizations map #" + i);
|
console.log("Authorizations map #" + i);
|
||||||
|
@ -436,7 +425,6 @@ ACME._getCertificate = function (me, options) {
|
||||||
return ACME._postChallenge(me, options, results.identifier, challenge);
|
return ACME._postChallenge(me, options, results.identifier, challenge);
|
||||||
});
|
});
|
||||||
})).then(function () {
|
})).then(function () {
|
||||||
console.log("37 &#&#&#&#&#&#&&##&#&#&#&#&#&#&#&");
|
|
||||||
var validatedDomains = body.identifiers.map(function (ident) {
|
var validatedDomains = body.identifiers.map(function (ident) {
|
||||||
return ident.value;
|
return ident.value;
|
||||||
});
|
});
|
||||||
|
@ -456,8 +444,6 @@ ACME._getCertificate = function (me, options) {
|
||||||
ACME.create = function create(me) {
|
ACME.create = function create(me) {
|
||||||
if (!me) { me = {}; }
|
if (!me) { me = {}; }
|
||||||
me.acmeChallengePrefix = ACME.acmeChallengePrefix;
|
me.acmeChallengePrefix = ACME.acmeChallengePrefix;
|
||||||
me.acmeChallengeDnsPrefix = ACME.acmeChallengeDnsPrefix;
|
|
||||||
me.acmeChallengePrefixes = ACME.acmeChallengePrefixes;
|
|
||||||
me.RSA = me.RSA || require('rsa-compat').RSA;
|
me.RSA = me.RSA || require('rsa-compat').RSA;
|
||||||
me.request = me.request || require('request');
|
me.request = me.request || require('request');
|
||||||
me.promisify = me.promisify || require('util').promisify;
|
me.promisify = me.promisify || require('util').promisify;
|
||||||
|
|
48
test.cb.js
48
test.cb.js
|
@ -1,17 +1,21 @@
|
||||||
'use strict';
|
'use strict';
|
||||||
|
|
||||||
module.exports.run = function run(web, chType, email, accountKeypair, domainKeypair) {
|
module.exports.run = function run(web, chType, email) {
|
||||||
var RSA = require('rsa-compat').RSA;
|
var RSA = require('rsa-compat').RSA;
|
||||||
var directoryUrl = 'https://acme-staging-v02.api.letsencrypt.org/directory';
|
var directoryUrl = 'https://acme-staging-v02.api.letsencrypt.org/directory';
|
||||||
var acme2 = require('./').ACME.create({ RSA: RSA });
|
var acme2 = require('./compat').ACME.create({ RSA: RSA });
|
||||||
// [ 'test.ppl.family' ] 'coolaj86@gmail.com''http-01'
|
// [ 'test.ppl.family' ] 'coolaj86@gmail.com''http-01'
|
||||||
acme2.init(directoryUrl).then(function () {
|
console.log(web, chType, email);
|
||||||
|
return;
|
||||||
|
acme2.init(directoryUrl).then(function (body) {
|
||||||
|
console.log(body);
|
||||||
|
return;
|
||||||
|
|
||||||
var options = {
|
var options = {
|
||||||
agreeToTerms: function (tosUrl, agree) {
|
agreeToTerms: function (tosUrl, agree) {
|
||||||
agree(null, tosUrl);
|
agree(null, tosUrl);
|
||||||
}
|
}
|
||||||
, setChallenge: function (opts, cb) {
|
, setChallenge: function (opts, cb) {
|
||||||
var pathname;
|
|
||||||
|
|
||||||
console.log("");
|
console.log("");
|
||||||
console.log('identifier:');
|
console.log('identifier:');
|
||||||
|
@ -30,50 +34,40 @@ module.exports.run = function run(web, chType, email, accountKeypair, domainKeyp
|
||||||
console.log(opts.dnsAuthorization);
|
console.log(opts.dnsAuthorization);
|
||||||
console.log("");
|
console.log("");
|
||||||
|
|
||||||
if ('http-01' === opts.type) {
|
console.log("Put the string '" + opts.keyAuthorization + "' into a file at '" + opts.hostname + "/" + opts.token + "'");
|
||||||
pathname = opts.hostname + acme2.acmeChallengePrefix + "/" + opts.token;
|
console.log("\nThen hit the 'any' key to continue (must be specifically the 'any' key)...");
|
||||||
console.log("Put the string '" + opts.keyAuthorization + "' into a file at '" + pathname + "'");
|
|
||||||
console.log("echo '" + opts.keyAuthorization + "' > '" + pathname + "'");
|
|
||||||
} else if ('dns-01' === opts.type) {
|
|
||||||
pathname = acme2.acmeChallengeDnsPrefix + "." + opts.hostname.replace(/^\*\./, '');
|
|
||||||
console.log("Put the string '" + opts.dnsAuthorization + "' into the TXT record '" + pathname + "'");
|
|
||||||
console.log("ddig TXT " + pathname + " '" + opts.dnsAuthorization + "'");
|
|
||||||
} else {
|
|
||||||
cb(new Error("[acme-v2] unrecognized challenge type"));
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
console.log("\nThen hit the 'any' key to continue...");
|
|
||||||
|
|
||||||
function onAny() {
|
function onAny() {
|
||||||
console.log("'any' key was hit");
|
|
||||||
process.stdin.pause();
|
process.stdin.pause();
|
||||||
process.stdin.removeListener('data', onAny);
|
process.stdin.removeEventListener('data', onAny);
|
||||||
process.stdin.setRawMode(false);
|
process.stdin.setRawMode(false);
|
||||||
cb();
|
cb();
|
||||||
}
|
}
|
||||||
|
|
||||||
process.stdin.setRawMode(true);
|
process.stdin.setRawMode(true);
|
||||||
process.stdin.resume();
|
process.stdin.resume();
|
||||||
process.stdin.on('data', onAny);
|
process.stdin.on('data', onAny);
|
||||||
}
|
}
|
||||||
, removeChallenge: function (opts, cb) {
|
, removeChallenge: function (opts, cb) {
|
||||||
// hostname, key
|
// hostname, key
|
||||||
console.log('[acme-v2] remove challenge', opts.hostname, opts.keyAuthorization);
|
console.log('[DEBUG] remove challenge', hostname, key);
|
||||||
setTimeout(cb, 1 * 1000);
|
setTimeout(cb, 1 * 1000);
|
||||||
}
|
}
|
||||||
, challengeType: chType
|
, challengeType: chType
|
||||||
, email: email
|
, email: email
|
||||||
, accountKeypair: accountKeypair
|
, accountKeypair: RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/account.privkey.pem') })
|
||||||
, domainKeypair: domainKeypair
|
, domainKeypair: RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/privkey.pem') })
|
||||||
, domains: web
|
, domains: web
|
||||||
};
|
};
|
||||||
|
|
||||||
acme2.accounts.create(options).then(function (account) {
|
acme2.registerNewAccount(options).then(function (account) {
|
||||||
console.log('[acme-v2] account:');
|
console.log('account:');
|
||||||
console.log(account);
|
console.log(account);
|
||||||
|
|
||||||
acme2.certificates.create(options).then(function (fullchainPem) {
|
acme2.getCertificate(options, function (fullchainPem) {
|
||||||
console.log('[acme-v2] fullchain.pem:');
|
console.log('[acme-v2] A fullchain.pem:');
|
||||||
|
console.log(fullchainPem);
|
||||||
|
}).then(function (fullchainPem) {
|
||||||
|
console.log('[acme-v2] B fullchain.pem:');
|
||||||
console.log(fullchainPem);
|
console.log(fullchainPem);
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
|
|
|
@ -2,22 +2,22 @@
|
||||||
|
|
||||||
var RSA = require('rsa-compat').RSA;
|
var RSA = require('rsa-compat').RSA;
|
||||||
|
|
||||||
module.exports.run = function (web, chType, email, accountKeypair, domainKeypair) {
|
module.exports.run = function (web, chType, email) {
|
||||||
console.log('[DEBUG] run', web, chType, email);
|
console.log('[DEBUG] run', web, chType, email);
|
||||||
|
|
||||||
var acme2 = require('./compat.js').ACME.create({ RSA: RSA });
|
var acme2 = require('./compat.js').ACME.create({ RSA: RSA });
|
||||||
acme2.getAcmeUrls(acme2.stagingServerUrl, function (err/*, directoryUrls*/) {
|
acme2.getAcmeUrls(acme2.stagingServerUrl, function (err, body) {
|
||||||
if (err) { console.log('err 1'); throw err; }
|
if (err) { console.log('err 1'); throw err; }
|
||||||
|
console.log(body);
|
||||||
|
|
||||||
var options = {
|
var options = {
|
||||||
agreeToTerms: function (tosUrl, agree) {
|
agreeToTerms: function (tosUrl, agree) {
|
||||||
agree(null, tosUrl);
|
agree(null, tosUrl);
|
||||||
}
|
}
|
||||||
, setChallenge: function (hostname, token, val, cb) {
|
, setChallenge: function (hostname, token, val, cb) {
|
||||||
var pathname = hostname + acme2.acmeChallengePrefix + "/" + token;
|
console.log("Put the string '" + val + "' into a file at '" + hostname + "/" + acme2.acmeChallengePrefix + "/" + token + "'");
|
||||||
console.log("Put the string '" + val + "' into a file at '" + pathname + "'");
|
console.log("echo '" + val + "' > '" + hostname + "/" + acme2.acmeChallengePrefix + "/" + token + "'");
|
||||||
console.log("echo '" + val + "' > '" + pathname + "'");
|
console.log("\nThen hit the 'any' key to continue (must be specifically the 'any' key)...");
|
||||||
console.log("\nThen hit the 'any' key to continue...");
|
|
||||||
|
|
||||||
function onAny() {
|
function onAny() {
|
||||||
console.log("'any' key was hit");
|
console.log("'any' key was hit");
|
||||||
|
@ -37,8 +37,8 @@ module.exports.run = function (web, chType, email, accountKeypair, domainKeypair
|
||||||
}
|
}
|
||||||
, challengeType: chType
|
, challengeType: chType
|
||||||
, email: email
|
, email: email
|
||||||
, accountKeypair: accountKeypair
|
, accountKeypair: RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/account.privkey.pem') })
|
||||||
, domainKeypair: domainKeypair
|
, domainKeypair: RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/privkey.pem') })
|
||||||
, domains: web
|
, domains: web
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
10
test.js
10
test.js
|
@ -1,6 +1,5 @@
|
||||||
'use strict';
|
'use strict';
|
||||||
|
|
||||||
var RSA = require('rsa-compat').RSA;
|
|
||||||
var readline = require('readline');
|
var readline = require('readline');
|
||||||
var rl = readline.createInterface({
|
var rl = readline.createInterface({
|
||||||
input: process.stdin,
|
input: process.stdin,
|
||||||
|
@ -36,11 +35,10 @@ function getEmail(web, chType) {
|
||||||
if (!email) { email = null; }
|
if (!email) { email = null; }
|
||||||
|
|
||||||
rl.close();
|
rl.close();
|
||||||
var accountKeypair = RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/account.privkey.pem') });
|
console.log("[DEBUG] rl blah blah");
|
||||||
var domainKeypair = RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/privkey.pem') });
|
require('./test.compat.js').run(web, chType, email);
|
||||||
//require('./test.compat.js').run(web, chType, email, accountKeypair, domainKeypair);
|
//require('./test.cb.js').run(web, chType, email);
|
||||||
//require('./test.cb.js').run(web, chType, email, accountKeypair, domainKeypair);
|
//require('./test.promise.js').run(web, chType, email);
|
||||||
require('./test.promise.js').run(web, chType, email, accountKeypair, domainKeypair);
|
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -1,19 +1,23 @@
|
||||||
'use strict';
|
'use strict';
|
||||||
|
|
||||||
/* global Promise */
|
/* global Promise */
|
||||||
module.exports.run = function run(web, chType, email, accountKeypair, domainKeypair) {
|
|
||||||
|
module.exports.run = function run(web, chType, email) {
|
||||||
var RSA = require('rsa-compat').RSA;
|
var RSA = require('rsa-compat').RSA;
|
||||||
var directoryUrl = 'https://acme-staging-v02.api.letsencrypt.org/directory';
|
var directoryUrl = 'https://acme-staging-v02.api.letsencrypt.org/directory';
|
||||||
var acme2 = require('./').ACME.create({ RSA: RSA });
|
var acme2 = require('./compat').ACME.create({ RSA: RSA });
|
||||||
// [ 'test.ppl.family' ] 'coolaj86@gmail.com''http-01'
|
// [ 'test.ppl.family' ] 'coolaj86@gmail.com''http-01'
|
||||||
acme2.init(directoryUrl).then(function () {
|
console.log(web, chType, email);
|
||||||
|
return;
|
||||||
|
acme2.init(directoryUrl).then(function (body) {
|
||||||
|
console.log(body);
|
||||||
|
return;
|
||||||
|
|
||||||
var options = {
|
var options = {
|
||||||
agreeToTerms: function (tosUrl) {
|
agreeToTerms: function (tosUrl, agree) {
|
||||||
return Promise.resolve(tosUrl);
|
agree(null, tosUrl);
|
||||||
}
|
}
|
||||||
, setChallenge: function (opts) {
|
, setChallenge: function (opts) {
|
||||||
return new Promise(function (resolve, reject) {
|
|
||||||
var pathname;
|
|
||||||
|
|
||||||
console.log("");
|
console.log("");
|
||||||
console.log('identifier:');
|
console.log('identifier:');
|
||||||
|
@ -32,54 +36,47 @@ module.exports.run = function run(web, chType, email, accountKeypair, domainKeyp
|
||||||
console.log(opts.dnsAuthorization);
|
console.log(opts.dnsAuthorization);
|
||||||
console.log("");
|
console.log("");
|
||||||
|
|
||||||
if ('http-01' === opts.type) {
|
console.log("Put the string '" + opts.keyAuthorization + "' into a file at '" + opts.hostname + "/" + opts.token + "'");
|
||||||
pathname = opts.hostname + acme2.acmeChallengePrefix + "/" + opts.token;
|
console.log("\nThen hit the 'any' key to continue (must be specifically the 'any' key)...");
|
||||||
console.log("Put the string '" + opts.keyAuthorization + "' into a file at '" + pathname + "'");
|
|
||||||
console.log("echo '" + opts.keyAuthorization + "' > '" + pathname + "'");
|
|
||||||
} else if ('dns-01' === opts.type) {
|
|
||||||
pathname = acme2.acmeChallengeDnsPrefix + "." + opts.hostname.replace(/^\*\./, '');;
|
|
||||||
console.log("Put the string '" + opts.dnsAuthorization + "' into the TXT record '" + pathname + "'");
|
|
||||||
console.log("ddig TXT " + pathname + " '" + opts.dnsAuthorization + "'");
|
|
||||||
} else {
|
|
||||||
reject(new Error("[acme-v2] unrecognized challenge type"));
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
console.log("\nThen hit the 'any' key to continue...");
|
|
||||||
|
|
||||||
|
return new Promise(function (resolve) {
|
||||||
function onAny() {
|
function onAny() {
|
||||||
console.log("'any' key was hit");
|
|
||||||
process.stdin.pause();
|
process.stdin.pause();
|
||||||
process.stdin.removeListener('data', onAny);
|
process.stdin.removeEventListener('data', onAny);
|
||||||
process.stdin.setRawMode(false);
|
process.stdin.setRawMode(false);
|
||||||
resolve();
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
resolve();
|
||||||
|
}
|
||||||
process.stdin.setRawMode(true);
|
process.stdin.setRawMode(true);
|
||||||
process.stdin.resume();
|
process.stdin.resume();
|
||||||
process.stdin.on('data', onAny);
|
process.stdin.on('data', onAny);
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
, removeChallenge: function (opts) {
|
, removeChallenge: function (opts) {
|
||||||
console.log('[acme-v2] remove challenge', opts.hostname, opts.keyAuthorization);
|
|
||||||
return new Promise(function (resolve) {
|
|
||||||
// hostname, key
|
// hostname, key
|
||||||
|
console.log('[DEBUG] remove challenge', opts.hostname, opts.keyAuthorization);
|
||||||
|
console.log("Remove the file '" + opts.hostname + "/" + opts.token + "'");
|
||||||
|
|
||||||
|
return new Promise(function (resolve) {
|
||||||
setTimeout(resolve, 1 * 1000);
|
setTimeout(resolve, 1 * 1000);
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
, challengeType: chType
|
, challengeType: chType
|
||||||
, email: email
|
, email: email
|
||||||
, accountKeypair: accountKeypair
|
, accountKeypair: RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/account.privkey.pem') })
|
||||||
, domainKeypair: domainKeypair
|
, domainKeypair: RSA.import({ privateKeyPem: require('fs').readFileSync(__dirname + '/privkey.pem') })
|
||||||
, domains: web
|
, domains: web
|
||||||
};
|
};
|
||||||
|
|
||||||
acme2.accounts.create(options).then(function (account) {
|
acme2.registerNewAccount(options).then(function (account) {
|
||||||
console.log('[acme-v2] account:');
|
console.log('account:');
|
||||||
console.log(account);
|
console.log(account);
|
||||||
|
|
||||||
acme2.certificates.create(options).then(function (fullchainPem) {
|
acme2.getCertificate(options, function (fullchainPem) {
|
||||||
console.log('[acme-v2] fullchain.pem:');
|
console.log('[acme-v2] A fullchain.pem:');
|
||||||
|
console.log(fullchainPem);
|
||||||
|
}).then(function (fullchainPem) {
|
||||||
|
console.log('[acme-v2] B fullchain.pem:');
|
||||||
console.log(fullchainPem);
|
console.log(fullchainPem);
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
|
|
Loading…
Reference in New Issue