security/dehydrated 0.7.1.6 DragonFly

Pure BASH/ZSH Lets Encrypt client

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: MIT
Categories: security
Package size: 36.9 KiB, 132.3 KiB installed

Description

Dehydrated is a client for signing certificates with an ACME-server (e.g. Let's Encrypt or ZeroSSL) implemented as a relatively simple bash-script.

In the other systems

System

Port

Version

DragonFly

security/dehydrated

0.7.1.6

FreeBSD

security/dehydrated

0.7.2_1

NetBSD

security/dehydrated

0.7.1

HardenedBSD

security/dehydrated

0.7.2_1

GhostBSD

security/dehydrated

0.7.2_1

Install

Binary package:

pkg install dehydrated

From DPorts:

cd /usr/dports/security/dehydrated && make install clean

Dependencies

Run dependencies 2

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

To use this script you should copy the examples in
/usr/local/etc/dehydrated/ and at least add a
domain and a contact mail address.

In order to run the script regularly to update
the certificates add this line to /etc/periodic.conf

weekly_dehydrated_enable="YES"

Additionally the following parameters can be added to
/etc/periodic.conf

To run the certification renenewal as a different user
weekly_dehydrated_user="_letsencrypt"

To run a script after the renewal (as root)
weekly_dehydrated_deployscript="/usr/local/etc/dehydrated/deploy.sh"

Additional flags for the periodic run go into
weekly_dehydrated_flags="-g"

If weekly run is not frequent enough, such as when fetching OCSP
response files (expires in 7 days), replace "weekly_" with "daily_"
as follows to run dehydrated daily. Options are exactly same with
weekly.

daily_dehydrated_enable="YES"
daily_dehydrated_user="_letsencrypt"
daily_dehydrated_deployscript="/usr/local/etc/dehydrated/deploy.sh"
daily_dehydrated_flags="-g"