BSD Ports

security/py-certbot 3.1.0,1 DragonFly

Let's Encrypt client

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
APACHE20
Categories
python, security
Package size
859.1 KiB, 5611.6 KiB installed

Description

In short: getting and installing SSL/TLS certificates made easy.

Certbot is a tool to automatically receive and install X.509 certificates to enable TLS on servers. The client will interoperate with the Let's Encrypt CA which will be issuing browser-trusted certificates for free.

It's all automated:

The tool will prove domain control to the CA and submit a CSR (Certificate Signing Request).

If domain control has been proven, a certificate will get issued and the tool will automatically install it.

In the other systems

SystemPortVersion
DragonFlysecurity/py-certbot3.1.0,1
FreeBSDsecurity/py-certbot4.2.0,2
NetBSDsecurity/py-certbot5.8.0
MidnightBSDsecurity/py-certbot${ACME_VERSION}_2,1

Install

Binary package:

pkg install py311-certbot

From DPorts:

cd /usr/dports/security/py-certbot && make install clean

Dependencies

Run dependencies 11

Configuration

No options to configure.

Service scripts
none

Message after installing

This port installs the "standalone" client only, which does not use and
is not the certbot-auto bootstrap/wrapper script.

The simplest form of usage to obtain certificates is:

 # sudo certbot certonly --standalone -d <domain>, [domain2, ... domainN]>

NOTE:

The client requires the ability to bind on TCP port 80 or 443 (depending
on the --preferred-challenges option used). If a server is running on that
port, it will need to be temporarily stopped so that the standalone server
can listen on that port to complete the challenge authentication process.

For more information on the 'standalone' mode, see:

  https://certbot.eff.org/docs/using.html#standalone

The certbot plugins to support apache and nginx certificate installation
will be made available in the following ports:

 * Apache plugin: security/py-certbot-apache
 * Nginx plugin: security/py-certbot-nginx

In order to automatically renew the certificates, add this line to
/etc/periodic.conf:

    weekly_certbot_enable="YES"

More config details in the certbot periodic script:

    /usr/local/etc/periodic/weekly/500.certbot-3.11

The certbot periodic script has new config options:

 * weekly_certbot_pre_hook
 * weekly_certbot_post_hook
 * weekly_certbot_deploy_hook
 * weekly_certbot_custom_args

For config details, see the certbot periodic script:

    /usr/local/etc/periodic/weekly/500.certbot-3.11