sysutils/anvil 0.0.20 DragonFly

Tools for distributing ssl certificates

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: BSD2CLAUSE
Categories: sysutils
Package size: 5.3 KiB, 11.1 KiB installed

Description

Tools for distributing ssl certificates

Designed for FreeBSD (it uses fetch, not wget or curl [yet]).

It also uses sudo, with the goal of this running as non-root and only allowing the cp & mv via sudo.

These tools were designed with acme.sh & Let's Encrypt in mind, but they should with with any certificates generated by any means.

In the other systems

System

Port

Version

DragonFly

sysutils/anvil

0.0.20

FreeBSD

sysutils/anvil

0.0.20

Install

Binary package:

pkg install anvil

From DPorts:

cd /usr/dports/sysutils/anvil && make install clean

Dependencies

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

After installing anvil, this is a short checklist of things to do, depending
on which tools are using.

For cert-puller:

  * adjust /usr/local/etc/anvil/cert-puller.conf

  * run 'cert-puller -s' to see the visudo settings you need

  * adjust the service configuration files (e.g. httpd.conf) if cert filenames 
    are different from defaults.  By default, anvil uses:

    * example.org.fullchain.cer
    * example.org.key

  * anvil does not distribute .key files. Do that manually.

  * install the crontab for anvil: sudo crontab -u anvil -e

###
# use /bin/sh to run commands, overriding the default set by cron
SHELL=/bin/sh
# mail any output to here, no matter whose crontab this is
[email protected]

7 13 * * * /usr/local/bin/cert-puller
###

For cert-shifter:

  * adjust /usr/local/etc/anvil/cert-shifter.conf

  * install the crontab for anvil: sudo crontab -u anvil -e

###
# use /bin/sh to run commands, overriding the default set by cron
SHELL=/bin/sh
# mail any output to here, no matter whose crontab this is
[email protected]

19 20 * * * /usr/local/bin/cert-shifter
###