This guide provides a  quick  setup  for  requesting  a	 TLS
certificate with acmed.

First, we generate our private key:

cpu% ramfs -p cpu% cd /tmp cpu%	auth/rsagen -t 'service=acme
role=sign     hash=sha256    acct=username@example.com'	   >
username@example.com.key

Next, we generate the public key, formatted as	a  JSON	 Web
Key:

cpu%	  auth/rsa2jwk	    username@example.com.key	   >
/sys/lib/tls/acmed/username@example.com.pub

We store our private key into secstore,	then factotum:

cpu% auth/secstore -g factotum secstore	password:  cpu%	 cat
username@example.com.key  >>  factotum cpu% auth/secstore -v
-p factotum secstore  password:	 cpu%  read  -m	 factotum  >
/mnt/factotum/ctl

We next	generate a private key for the	host,  and  set	 the
proper	   file	   permissions,	   and	  copy	  it	into
/sys/lib/tls/acmed/:

cpu% auth/rsagen -t 'service=tls owner=*' >  example.com.key
cpu% chmod 600 username@example.com.key	example.com.key	cpu%
cp	   username@example.com.key	     example.com.key
/sys/lib/tls/acmed/

We generate a certificate signing request, then	 create	 the
.well-known/acme-challenge  directory,	then pass the CSR to
acmed:

cpu%		  auth/rsa2csr		    'CN=example.com'
/sys/lib/tls/acmed/example.com.key
>/sys/lib/tls/acmed/example.com.csr    cpu%	mkdir	  -p
/usr/$user/www/example.com/.well-known/acme-challenge	cpu%
webfs;	       auth/acmed	  -t	     http	  -o
/usr/$user/www/example.com/.well-known/acme-challenge
username@example.com	  /sys/lib/tls/acmed/example.com.csr
>/sys/lib/tls/acmed/example.com.crt

If all	went  well,  you  should  find	the  certificate  in
/sys/lib/tls/acmed/example.com.crt