Re: acme-client(1): dns-01

2021-01-25 Thread Stuart Henderson
On 2020/12/24 18:11, Florian Obser wrote: > 'tis the season to be jolly... sorry for the late reply! > I think it's time to kick the tires on this one. Works for me, I tried it with the script I'm already using with uacme to do updates via rndc. > I don't like the "exec" keyword, we should find

Re: acme-client(1): dns-01

2020-12-29 Thread Daniel Moch
Theo de Raadt wrote: > never use nobody for another purpose. Of course you're right. I regret the suggestion that this was a good idea, especially in a production environment. Anyway, FWIW I looked through the code as well and didn't notice any issues.

Re: acme-client(1): dns-01

2020-12-24 Thread Theo de Raadt
Daniel Moch wrote: > I like being able to specify a user to run the script as. In my case > it's sufficient to run the script as 'nobody'. Regarding this second sentence: never use nobody for another purpose. It has other purposes, and if people follow this pattern of using nobody then potentia

Re: acme-client(1): dns-01

2020-12-24 Thread Daniel Moch
Quoth Florian Obser : > Comments, tests? Works as advertized. Tested against Vultr DNS. When generating a star cert, the config parser requires the starred name(s) be quoted. The error in this situation is a bit vague, just a reference to a syntax error on the line IIRC. Not sure if that can b

acme-client(1): dns-01

2020-12-24 Thread Florian Obser
'tis the season to be jolly... I think it's time to kick the tires on this one. I don't like the "exec" keyword, we should find something better. Also, should the user be optional? Oh, and it's not enforcing that exec is present in the config. sthen pointed me in the direction of dehydrated http