ACME Certs

Install¶

Socat

apt install -y socat

Acme

curl https://get.acme.sh | sh

source ~/.bashrc

You can also enable auto upgrade

acme.sh --upgrade --auto-upgrade

Disable auto upgrade:

acme.sh --upgrade --auto-upgrade 0

Default letsencrypt

acme.sh --set-default-ca --server letsencrypt

Issue

acme.sh --issue -d <DOMAIN> --standalone [--keylength ec-256]

Install

acme.sh --install-cert -d <DOMAIN> --ecc \
  --fullchain-file /etc/ssl/private/<DOMAIN>.cer \
  --key-file /etc/ssl/private/<DOMAIN>.key

Renew

acme.sh --renew -d example.com