benileo/autotls

autotls's Issues

Add the ability use docker run domain email

also add the ability to run docker run domain

Create detailed usage documentation

Renewal script may be broken

When I first implemented this I didn't consider that we may need to stop the Nginx server before we do a renewal.

Use a proper nginx conf file parsing library

Use properties for config object

Support IPv6

No configuration options except domain name and proxy_host

just need a domain name and a url for proxying http requests to

add option for getting a www certificate too

don't use certbot - it's crap

re-write in go

Add www. alias to nginx config if not present

In entrypoint.py we generate an nginx config. If the domain is not prefixed with www. then we should add an alias for it.

Support OCSP must staple

In both certbot and nginx config

email should not be necessary

Stop using Port 80

It's a shame that you need to open up port 80 just to validate the challenge. Ideally, when we are bootstrapping we need to set up a server on port 443 with a self signed certificate.

SSLError: [Errno 2] No such file or directory

2016-09-29 02:44:35,987:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.standalone.Authenticator object at 0x7f087050d510> and installer None
2016-09-29 02:44:42,427:DEBUG:root:Sending GET request to https://acme-staging.api.letsencrypt.org/directory. args: (), kwargs: {}
2016-09-29 02:44:42,430:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging.api.letsencrypt.org
2016-09-29 02:44:42,443:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/bin/certbot", line 9, in <module>
    load_entry_point('certbot==0.8.1', 'console_scripts', 'certbot')()
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 744, in main
    return config.func(config, plugins)
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 550, in obtain_cert
    le_client = _init_le_client(config, auth, installer)
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 360, in _init_le_client
    acc, acme = _determine_account(config)
  File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 345, in _determine_account
    config, account_storage, tos_cb=_tos_cb)
  File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 118, in register
    acme = acme_from_config_key(config, key)
  File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 42, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
  File "/usr/lib/python2.7/dist-packages/acme/client.py", line 63, in __init__
    self.net.get(directory).json())
  File "/usr/lib/python2.7/dist-packages/acme/client.py", line 631, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
  File "/usr/lib/python2.7/dist-packages/acme/client.py", line 613, in _send_request
    response = self.session.request(method, url, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 468, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/dist-packages/requests/adapters.py", line 433, in send
    raise SSLError(e, request=request)
SSLError: [Errno 2] No such file or directory

Create a way to persist the certificates

This can be done by creating a shared volume on the host mapping to /etc/letsencrypt/

add more in depth integration tests