head 1.2; access; symbols; locks; strict; comment @# @; 1.2 date 2025.10.23.18.37.13; author vins; state dead; branches; next 1.1; commitid SwrwDM2li1dTXIfG; 1.1 date 2025.10.20.19.09.17; author vins; state Exp; branches; next ; commitid Et69JdocpAwRelfG; desc @@ 1.2 log @security/acme-client: move conf file to files dir @ text @$NetBSD: patch-acme-client.conf,v 1.1 2025/10/20 19:09:17 vins Exp $ acme-client configuration for pkgsrc. --- acme-client.conf.orig 2025-10-20 17:42:55.426948159 +0000 +++ acme-client.conf @@@@ -0,0 +1,31 @@@@ +# +# $OpenBSD: acme-client.conf,v 1.4 2020/09/17 09:13:06 florian Exp $ +# +authority letsencrypt { + api url "https://acme-v02.api.letsencrypt.org/directory" + account key "@@PKG_SYSCONFDIR@@/acme/letsencrypt-privkey.pem" +} + +authority letsencrypt-staging { + api url "https://acme-staging-v02.api.letsencrypt.org/directory" + account key "@@PKG_SYSCONFDIR@@/acme/letsencrypt-staging-privkey.pem" +} + +authority buypass { + api url "https://api.buypass.com/acme/directory" + account key "@@PKG_SYSCONFDIR@@/acme/buypass-privkey.pem" + contact "mailto:me@@example.com" +} + +authority buypass-test { + api url "https://api.test4.buypass.no/acme/directory" + account key "@@PKG_SYSCONFDIR@@/acme/buypass-test-privkey.pem" + contact "mailto:me@@example.com" +} + +domain example.com { + alternative names { secure.example.com } + domain key "@@SSLDIR@@/acme/private/example.com.key" + domain full chain certificate "@@SSLDIR@@/acme/example.com.fullchain.pem" + sign with letsencrypt +} @ 1.1 log @security/acme-client: initial import of package Portable version of OpenBSD's acme-client(1), a secure ACME / Let's Encrypt client. acme-client looks in its configuration for a domain section corresponding to the handle given as command line argument, and uses that configuration to retrieve an X.509 certificate which can be used to provide domain name validation.w @ text @d1 1 a1 1 $NetBSD$ @