iac
/
nginx-certbox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: iac:ad4bb094c2f65a09ab72ed93ee5907921ccfff31
Branches Tags
iac:main
..
compare: iac:62a1c61f54244859d33d5697bb954960f130901d
Branches Tags
iac:main

11 Commits
ad4bb094c2 ... 62a1c61f54

Author SHA1 Message Date
Philipp 62a1c61f54
Merge pull request #77 from alexanderdushkin/patch-1 
Fix fake cert key length
 2020-11-03 11:08:45 +01:00
Philipp cf44b237ab
Merge branch 'master' into patch-1 2020-11-03 11:08:12 +01:00
Philipp 29b1a9af84
Merge pull request #96 from jhseo1107/master 
Change dummy cert rsa size from 1024 to 2048
 2020-11-03 11:05:41 +01:00
Janghyub Seo dafa16d433
Change dummy cert rsa size from 1024 to 2048 
The recent version of nginx seems to require a certificate with at least 2048 bit rsa key.
 2020-11-03 12:13:25 +09:00
Alexander Dushkin 9fdb9461e7
Fix fake cert key length 
This changes the key length for the fake certificate to match the key length of the real certificate. A 1024-bit key prevented nginx from booting up on my server because of a "key too short" error.
 2020-06-28 00:20:46 -04:00
Philipp cb13104649
Merge pull request #55 from michal-wrzosek/patch-1 
Updated outdated URLs
 2019-11-27 11:39:32 +01:00
Michał Wrzosek 59b0b8d34c
Updated outdated URLs 2019-11-26 22:01:32 +01:00
Philipp a3e0d81a90
Merge pull request #39 from wm222au/fix_tls_params 
Updated URL to recommended TLS parameters
 2019-08-07 18:10:21 +02:00
William Myllenberg 93e053d3bf Updated URL to recommended TLS parameters 2019-08-07 15:47:16 +02:00
Philipp 6ceb07489a
Merge pull request #29 from Pixep/patch-1 
Use `example.org` everywhere for consistency
 2019-06-27 12:09:23 +02:00
Adrien Leravat 831b8abd7e
Use `example.org` everywhere for consistency 
This makes it a bit easier when doing a string search/replacement, by only having to replace `example.org`. Nginx's `app.conf` uses `example.org`.
 2019-06-16 15:03:02 -07:00
1 changed files with 4 additions and 4 deletions
Show Stats Expand all files Collapse all files

8
init-letsencrypt.sh
View File

@ -5,7 +5,7 @@ if ! [ -x "$(command -v docker-compose)" ]; then
exit 1 exit 1
fi fi
domains=(example.com www.example.com) domains=(example.org www.example.org)
rsa_key_size=4096 rsa_key_size=4096
data_path="./data/certbot" data_path="./data/certbot"
email="" # Adding a valid address is strongly recommended email="" # Adding a valid address is strongly recommended
@ -22,8 +22,8 @@ fi
if [ ! -e "$data_path/conf/options-ssl-nginx.conf" ] || [ ! -e "$data_path/conf/ssl-dhparams.pem" ]; then if [ ! -e "$data_path/conf/options-ssl-nginx.conf" ] || [ ! -e "$data_path/conf/ssl-dhparams.pem" ]; then
echo "### Downloading recommended TLS parameters ..." echo "### Downloading recommended TLS parameters ..."
mkdir -p "$data_path/conf" mkdir -p "$data_path/conf"
curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf" curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf"
curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem" curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem"
echo echo
fi fi
@ -31,7 +31,7 @@ echo "### Creating dummy certificate for $domains ..."
path="/etc/letsencrypt/live/$domains" path="/etc/letsencrypt/live/$domains"
mkdir -p "$data_path/conf/live/$domains" mkdir -p "$data_path/conf/live/$domains"
docker-compose run --rm --entrypoint "\ docker-compose run --rm --entrypoint "\
openssl req -x509 -nodes -newkey rsa:1024 -days 1\ openssl req -x509 -nodes -newkey rsa:$rsa_key_size -days 1\
-keyout '$path/privkey.pem' \ -keyout '$path/privkey.pem' \
-out '$path/fullchain.pem' \ -out '$path/fullchain.pem' \
-subj '/CN=localhost'" certbot -subj '/CN=localhost'" certbot