MyFavMirrors/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2025-04-24 12:20:54 -04:00
Code Issues Packages Projects Releases Wiki Activity

Added option to skip challenge verification when getting Let's Encrypt certificate.

Browse Source
This commit is contained in:
Ylian Saint-Hilaire 2021-11-24 21:39:02 -08:00
parent aefe4ece9f
commit 02978e1972
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
letsencrypt.js
View File

@ -186,6 +186,7 @@ module.exports.CreateLetsEncrypt = function (parent) {
csr, csr,
email: obj.parent.config.letsencrypt.email, email: obj.parent.config.letsencrypt.email,
termsOfServiceAgreed: true, termsOfServiceAgreed: true,
skipChallengeVerification: (obj.parent.config.letsencrypt.skipchallengeverification === true),
challengeCreateFn, challengeCreateFn,
challengeRemoveFn challengeRemoveFn
}).then(function (cert) { }).then(function (cert) {

1
meshcentral-config-schema.json
View File

@ -858,6 +858,7 @@
"properties": { "properties": {
"email": { "type": "string", "format": "email", "description": "Email address of the administrator of this server. Make sure this is a valid email address otherwise the certificate request will fail." }, "email": { "type": "string", "format": "email", "description": "Email address of the administrator of this server. Make sure this is a valid email address otherwise the certificate request will fail." },
"names": { "type": "string" }, "names": { "type": "string" },
"skipChallengeVerification": { "type": "boolean", "default": false, "description": "By default, MeshCentral will perform a self-test to make sure HTTP port 80 can respond correctly before making a request to Let's Encrypt. In some cases, this self-test can't work and must be skipped." },
"production": { "type": "boolean", "default": false, "description": "By default a test certificate will be obtained from Let's Encrypt. Always start by getting a test certificate and make sure that works before setting this to true and obtaining a production certificaite. Making too many bad requests for a production certificate will get you banned for a long period of time." } "production": { "type": "boolean", "default": false, "description": "By default a test certificate will be obtained from Let's Encrypt. Always start by getting a test certificate and make sure that works before setting this to true and obtaining a production certificaite. Making too many bad requests for a production certificate will get you banned for a long period of time." }
}, },
"required": [ "email", "names" ] "required": [ "email", "names" ]

1
sample-config-advanced.json
View File

@ -442,6 +442,7 @@
"__comment__": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.", "__comment__": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
"email": "myemail@myserver.com", "email": "myemail@myserver.com",
"names": "myserver.com,customer1.myserver.com", "names": "myserver.com,customer1.myserver.com",
"skipChallengeVerification": false,
"production": false "production": false
}, },
"_peers": { "_peers": {