BSD Ports

sysutils/anvil 0.0.20 FreeBSD

Tools for distributing ssl certificates

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
License
BSD2CLAUSE
Categories
sysutils
Package size
5.9 KiB, 11.1 KiB installed

Description

Tools for distributing ssl certificates

Designed for FreeBSD (it uses fetch, not wget or curl [yet]).

It also uses sudo, with the goal of this running as non-root and only allowing the cp & mv via sudo.

These tools were designed with acme.sh & Let's Encrypt in mind, but they should with with any certificates generated by any means.

In the other systems

SystemPortVersion
FreeBSDsysutils/anvil0.0.20
DragonFlysysutils/anvil0.0.20
HardenedBSDsysutils/anvil0.0.20
GhostBSDsysutils/anvil0.0.20

Install

Binary package:

pkg install anvil

From the ports tree:

cd /usr/ports/sysutils/anvil/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	anvil>0:sysutils/anvil

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest0.0.200.0.200.0.200.0.200.0.20
FreeBSD:14:quarterly0.0.200.0.20n/a0.0.200.0.20
FreeBSD:15:latest0.0.200.0.20n/a0.0.200.0.20
FreeBSD:15:quarterly0.0.200.0.20n/an/an/a
FreeBSD:16:latest0.0.200.0.20n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

No port depends on this one.

Configuration

Options name: sysutils_anvil

OptionDefaultDescription
CURLoffUse curl, not fetch
FETCHonUse fetch
WGEToffUse wget, not fetch
Service scripts
none

Message after installing

After installing anvil, this is a short checklist of things to do, depending
on which tools are using.

For cert-puller:

  * adjust /usr/local/etc/anvil/cert-puller.conf

  * run 'cert-puller -s' to see the visudo settings you need

  * adjust the service configuration files (e.g. httpd.conf) if cert filenames 
    are different from defaults.  By default, anvil uses:

    * example.org.fullchain.cer
    * example.org.key

  * anvil does not distribute .key files. Do that manually.

  * install the crontab for anvil: sudo crontab -u anvil -e

###
# use /bin/sh to run commands, overriding the default set by cron
SHELL=/bin/sh
# mail any output to here, no matter whose crontab this is
[email protected]

7 13 * * * /usr/local/bin/cert-puller
###

For cert-shifter:

  * adjust /usr/local/etc/anvil/cert-shifter.conf

  * install the crontab for anvil: sudo crontab -u anvil -e

###
# use /bin/sh to run commands, overriding the default set by cron
SHELL=/bin/sh
# mail any output to here, no matter whose crontab this is
[email protected]

19 20 * * * /usr/local/bin/cert-shifter
###

Files

pkg-plist 5
  • @sample etc/anvil/cert-puller.conf.sample
  • @sample etc/anvil/cert-shifter.conf.sample
  • bin/cert-puller
  • bin/cert-shifter
  • @dir(,,755) /var/db/anvil
distinfo 1
FileSizeSHA256
dlangille-anvil-0.0.20_GH0.tar.gz802606da6b6a07f0002a1776c79490e60a3221639a7a6daaf3b36704f48ad581731e4

Commit history 0

No commits in the history this site was built from.