mirror of
https://github.com/certbot/certbot.git
synced 2026-01-21 19:01:07 +03:00
7dc64e0387
Save accounts to:
/etc/letsencrypt/accounts/www.letsencrypt-dmeo.org/acme/new-reg/ \
kuba.le.wtf@2015-07-04T14:04:10Z/ \
{regr.json,meta.json,private_key.json}
Account now represents a combination of private key, Registration
Resource and client account metadata. `Account.id` based on the
account metadata (creation host and datetime). UI interface
(`cli._determine_account`) based on the `id`, and not on email as
previously.
Add `AccountStorage` interface and `AccountFileStorage`,
`AccountMemoryStorage` implementations (latter, in-memory, useful for
testing).
Create Account only after Registration Resource is received
(`register()` returns `Account`).
Allow `client.Client(..., acme=acme, ...)`: API client might reuse
acme.client.Client as returned by `register()`.
Move report_new_account to letsencrypt.account, client.Client.register
into client.register.
Use Registration.from_data acme API.
achallenges.AChallenge.key is now the `acme.jose.JWK`, not
`le_util.Key`. Plugins have to export PEM/DER as necessary
(c.f. `letsencrypt.plugins.common.Dvsni.get_key_path`)
Add --agree-tos, save --agree-eula to "args.eula". Prompt for EULA as
soon as client is launched, add prompt for TOS.
Remove unnecessary letsencrypt.network. Remove, now irrelevant,
`IConfig.account_keys_dir`.
Based on the draft from
https://github.com/letsencrypt/letsencrypt/pull/362#issuecomment-97946817.
100 lines
2.7 KiB
Python
100 lines
2.7 KiB
Python
"""Let's Encrypt constants."""
|
|
import os
|
|
import logging
|
|
|
|
from acme import challenges
|
|
|
|
|
|
SETUPTOOLS_PLUGINS_ENTRY_POINT = "letsencrypt.plugins"
|
|
"""Setuptools entry point group name for plugins."""
|
|
|
|
CLI_DEFAULTS = dict(
|
|
config_files=[
|
|
"/etc/letsencrypt/cli.ini",
|
|
# http://freedesktop.org/wiki/Software/xdg-user-dirs/
|
|
os.path.join(os.environ.get("XDG_CONFIG_HOME", "~/.config"),
|
|
"letsencrypt", "cli.ini"),
|
|
],
|
|
verbose_count=-(logging.WARNING / 10),
|
|
server="https://www.letsencrypt-demo.org/acme/new-reg",
|
|
rsa_key_size=2048,
|
|
rollback_checkpoints=0,
|
|
config_dir="/etc/letsencrypt",
|
|
work_dir="/var/lib/letsencrypt",
|
|
logs_dir="/var/log/letsencrypt",
|
|
no_verify_ssl=False,
|
|
dvsni_port=challenges.DVSNI.PORT,
|
|
|
|
auth_cert_path="./cert.pem",
|
|
auth_chain_path="./chain.pem",
|
|
)
|
|
"""Defaults for CLI flags and `.IConfig` attributes."""
|
|
|
|
|
|
RENEWER_DEFAULTS = dict(
|
|
renewer_enabled="yes",
|
|
renew_before_expiry="30 days",
|
|
deploy_before_expiry="20 days",
|
|
)
|
|
"""Defaults for renewer script."""
|
|
|
|
|
|
EXCLUSIVE_CHALLENGES = frozenset([frozenset([
|
|
challenges.DVSNI, challenges.SimpleHTTP])])
|
|
"""Mutually exclusive challenges."""
|
|
|
|
|
|
ENHANCEMENTS = ["redirect", "http-header", "ocsp-stapling", "spdy"]
|
|
"""List of possible :class:`letsencrypt.interfaces.IInstaller`
|
|
enhancements.
|
|
|
|
List of expected options parameters:
|
|
- redirect: None
|
|
- http-header: TODO
|
|
- ocsp-stapling: TODO
|
|
- spdy: TODO
|
|
|
|
"""
|
|
|
|
ARCHIVE_DIR = "archive"
|
|
"""Archive directory, relative to `IConfig.config_dir`."""
|
|
|
|
CONFIG_DIRS_MODE = 0o755
|
|
"""Directory mode for ``.IConfig.config_dir`` et al."""
|
|
|
|
ACCOUNTS_DIR = "accounts"
|
|
"""Directory where all accounts are saved."""
|
|
|
|
BACKUP_DIR = "backups"
|
|
"""Directory (relative to `IConfig.work_dir`) where backups are kept."""
|
|
|
|
CERT_DIR = "certs"
|
|
"""See `.IConfig.cert_dir`."""
|
|
|
|
CERT_KEY_BACKUP_DIR = "keys-certs"
|
|
"""Directory where all certificates and keys are stored (relative to
|
|
`IConfig.work_dir`). Used for easy revocation."""
|
|
|
|
IN_PROGRESS_DIR = "IN_PROGRESS"
|
|
"""Directory used before a permanent checkpoint is finalized (relative to
|
|
`IConfig.work_dir`)."""
|
|
|
|
KEY_DIR = "keys"
|
|
"""Directory (relative to `IConfig.config_dir`) where keys are saved."""
|
|
|
|
LIVE_DIR = "live"
|
|
"""Live directory, relative to `IConfig.config_dir`."""
|
|
|
|
TEMP_CHECKPOINT_DIR = "temp_checkpoint"
|
|
"""Temporary checkpoint directory (relative to `IConfig.work_dir`)."""
|
|
|
|
REC_TOKEN_DIR = "recovery_tokens"
|
|
"""Directory where all recovery tokens are saved (relative to
|
|
`IConfig.work_dir`)."""
|
|
|
|
RENEWAL_CONFIGS_DIR = "configs"
|
|
"""Renewal configs directory, relative to `IConfig.config_dir`."""
|
|
|
|
RENEWER_CONFIG_FILENAME = "renewer.conf"
|
|
"""Renewer config file name (relative to `IConfig.config_dir`)."""
|