zerossl.com

Welcome to the acme.sh wiki!

https://wiki.acme.sh

Here is the wiki page for acme.sh

https://github.com/acmesh-official/acme.sh/wiki/How-to-install

Docker install: https://github.com/acmesh-official/acme.sh/wiki/Run-acme.sh-in-docker

After installation,

1. Check if port 80 is opened on Proxmox host.

2. Issue a cert:

/root/.acme.sh/acme.sh --issue --standalone -d <DOMAIN>

After issuing, the cert will be automatically renewed every 60 days.

3. Install the cert to Proxmox:

/root/.acme.sh/acme.sh --installcert -d <DOMAIN> \
 --certpath /etc/pve/local/pveproxy-ssl.pem \
 --keypath /etc/pve/local/pveproxy-ssl.key \
 --capath /etc/pve/local/pveproxy-ssl.pem \
 --reloadcmd "systemctl restart pveproxy"

Ok, it's done. Open the link: https://<DOMAIN>:8006

After you issue the cert, you can use the toPkcs command to convert the cert to pkcs12(pfx) format

acme.sh --toPkcs -d <domain> [--password pfx-password]

Important note: If you do not specify a password on the command line, OpenSSH itself will prompt you for one and the pkcs12(pfx) file will be generated. However, it will not be regenerated during certificate renewal. You must specify a non-blank password on the command line in order for acme.sh to regenerate the pkcs12(pfx) when renewing certificates.

1. Download cygwin installer: setup-x86.exe or setup-x86_64.exe from: https://cygwin.com/

2. In the installer, select: Net: curl and Net: socat to install.

3. After install finished, you can open the Cygwin window and use curl to install acme.shonline: https://github.com/acmesh-official/acme.sh/wiki#1-how-to-install

4. A scheduler task will be installed in your Windows scheduler to renew your certs.

Copyright: acme.sh wiki contributors

License: GNU General Public License version 3 or any later version