summaryrefslogtreecommitdiffstats
path: root/content
diff options
context:
space:
mode:
authorDante Catalfamo2020-06-16 23:16:21 -0400
committerDante Catalfamo2020-06-16 23:16:21 -0400
commitb800e01a8b20e87fecb93ac5e0aedee01c178352 (patch)
tree14a385c88b03c5af1610936bd0c615632c17c745 /content
parent80a878a489bc8563e803c37260f6427a77ff09d1 (diff)
downloadblog-b800e01a8b20e87fecb93ac5e0aedee01c178352.tar.gz
blog-b800e01a8b20e87fecb93ac5e0aedee01c178352.tar.bz2
blog-b800e01a8b20e87fecb93ac5e0aedee01c178352.zip
Remove whitrespace from beginning of post
Diffstat (limited to 'content')
-rw-r--r--content/posts/letsencrypt-on-openbsd.org71
1 files changed, 37 insertions, 34 deletions
diff --git a/content/posts/letsencrypt-on-openbsd.org b/content/posts/letsencrypt-on-openbsd.org
index e63f80d..30aeb94 100644
--- a/content/posts/letsencrypt-on-openbsd.org
+++ b/content/posts/letsencrypt-on-openbsd.org
@@ -7,18 +7,19 @@
#+SLUG:
#+SUMMARY:
- So I have an OpenBSD server serving a static website using
- =httpd=. I've been thinking for a while I should add an SSL
- certificate, but never got around to it because it was just a small
- hobby website and it didn't require any real attention.
+So I have an OpenBSD server serving a static website using
+=httpd=. I've been thinking for a while I should add an SSL
+certificate, but never got around to it because it was just a small
+hobby website and it didn't require any real attention.
- Today while watching one of the OpenBSD tutorials at BSDCan, I
- thought it was finally time. Since configuring everything else in
- OpenBSD is so easy, this must be easy too, right?
+Today while watching one of the OpenBSD tutorials at BSDCan, I thought
+it was finally time. Since configuring everything else in OpenBSD is
+so easy, this must be easy too, right?
- These were the only changes I had to make to my =httpd.conf= to get
- =acme-client= to work. This is described in the =acme-client= man page.
- #+BEGIN_SRC diff
+These were the only changes I had to make to my =httpd.conf= to get
+=acme-client= to work. This is described in the =acme-client= man
+page.
+#+BEGIN_SRC diff
--- httpd.conf
+++ httpd.conf.new
@@ -1,4 +1,19 @@
@@ -30,14 +31,15 @@
+ request strip 2
+ }
+}
- #+END_SRC
+#+END_SRC
- After that, I reloaded =httpd= with ~rcctl reload httpd~
+After that, I reloaded =httpd= with ~rcctl reload httpd~
- I then copies the example config from
- =/etc/examples/acme-client.conf= to =/etc/acme-client=. This is
- what the modifications to the example I made look like.
- #+BEGIN_SRC diff
+I then copies the example config from =/etc/examples/acme-client.conf=
+to =/etc/acme-client=. This is what the modifications to the example I
+made look like.
+
+#+BEGIN_SRC diff
--- acme-client.conf
+++ acme-client.conf.new
@@ -1,19 +1,19 @@
@@ -64,27 +66,28 @@
+ domain full chain certificate "/etc/ssl/lambda.cx.fullchain.pem"
sign with letsencrypt
}
- #+END_SRC
+#+END_SRC
+
+It's a pretty small change. I have the alternative name line commented
+out because I only have =lambda.cx= pointing at my server and not
+=www.lambda.cx=. Although if I did I would un-comment it. I could also
+add sub-domains like =sub.lambda.cx= in that area separated by a
+space.
- It's a pretty small change. I have the alternative name line
- commented out because I only have =lambda.cx= pointing at my server
- and not =www.lambda.cx=. Although if I did I would un-comment it. I
- could also add sub-domains like =sub.lambda.cx= in that area
- separated by a space.
+After that I just had to run ~acme-client -v lambda.cx~ (-v for
+verbosity) and it generated the certificates.
- After that I just had to run ~acme-client -v lambda.cx~ (-v for
- verbosity) and it generated the certificates.
+Then I added a =crontab= entry (using =crontab -e=) to run once a day
+at a random time and reload =httpd=.
- Then I added a =crontab= entry (using =crontab -e=) to run once a
- day at a random time and reload =httpd=.
- #+BEGIN_SRC
+#+BEGIN_SRC
~ ~ * * * acme-client lambda.cx && rcctl reload httpd
- #+END_SRC
+#+END_SRC
- Finally to use the new certificates I added the following lines to my
- =httpd.conf=.
+Finally to use the new certificates I added the following lines to my
+=httpd.conf=.
- #+BEGIN_SRC diff
+#+BEGIN_SRC diff
--- httpd.conf
+++ httpd.conf.new
@@ -1,8 +1,21 @@
@@ -109,7 +112,7 @@
+ request strip 2
+ }
+}
- #+END_SRC
+#+END_SRC
- I reloaded httpd with ~rcctl reload httpd~ and that was it, working
- certificate!
+I reloaded httpd with ~rcctl reload httpd~ and that was it, working
+certificate!