wm: doc

ref: 318ee44371ddef714ad3798b165285b360302e2d
dir: /acmed.ms/

View raw version
This guide is not yet finished

cpu% ramfs -p
cpu% cd /tmp
cpu% auth/rsagen -t 'service=acme role=sign hash=sha256 acct=username@example.com' > username@example.com.key
cpu% auth/rsa2jwk username@example.com.key > /sys/lib/tls/acmed/username@example.com.pub
% cd /tmp
% auth/secstore -g factotum
secstore password:
% cat username@example.com.key >> factotum
% auth/secstore -v -p factotum
secstore password:
% read -m factotum > /mnt/factotum/ctl

cpu% auth/rsagen -t 'service=tls owner=*' > example.com.key
cpu% chmod 600 username@example.com.key example.com.key 
cp username@example.com.key example.com.key /sys/lib/tls/acmed/
cpu% auth/rsa2csr 'CN=example.com' /sys/lib/tls/acmed/example.com.key >/sys/lib/tls/acmed/example.com.csr
webfs; auth/acmed -t http -o /usr/web/.well-known/acme-challenge username@example.com /sys/lib/tls/acmed/example.com.csr >/sys/lib/tls/acmed/example.com.crt

cpu% mkdir -p /usr/$user/www/example.com/.well-known/acme-challenge
cpu% auth/acmed -t http -o /usr/$user/www/example.com/.well-known/acme-challenge username@example.com /sys/lib/tls/acmed/example.com.csr >/sys/lib/tls/acmed/example.com.crt

If all went well, you should find the certificate in /sys/lib/tls/acmed/example.com.crt