upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-02-03 20:40:37 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #5173 from fraenki/acme_413

Browse source 
security/acme-client: release 4.13
This commit is contained in:
Frank Wall 2026-01-29 23:27:26 +01:00 committed by GitHub
commit cb73d5e65a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 23 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
security/acme-client/Makefile
View file

@ -1,5 +1,5 @@
PLUGIN_NAME= acme-client
PLUGIN_VERSION= 4.12
PLUGIN_VERSION= 4.13
PLUGIN_COMMENT= ACME Client
PLUGIN_MAINTAINER= opnsense@moov.de
PLUGIN_DEPENDS= acme.sh py${PLUGIN_PYTHON}-dns-lexicon

14
security/acme-client/pkg-descr
View file

@ -8,6 +8,20 @@ WWW: https://github.com/acmesh-official/acme.sh
Plugin Changelog
================
4.13
Added:
* add support for ACME profiles (#5154)
* add support for deploy hook "Ruckus" (#5157)
* add support for Spaceship.com DNS API (#5158)
* add global access key option for TransIP DNS API (#5166)
Changed:
* allow setting renewal interval to 0 (#5168)
Fixed:
* remove duplicate slashes in nsupdate, TransIP, OPNsense, TLS ALPN challenge types (#5166)
4.12
Added:

2
security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsNsupdate.php
View file

@ -40,7 +40,7 @@ class DnsNsupdate extends Base implements LeValidationInterface
public function prepare()
{
$configdir = (string)sprintf(self::ACME_CONFIG_DIR, $this->cert_id);
$secret_key_filename = "{$configdir}/secret.key";
$secret_key_filename = "{$configdir}secret.key";
$secret_key_data = (string)$this->config->dns_nsupdate_key . "\n";
file_put_contents($secret_key_filename, $secret_key_data);

2
security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsTransip.php
View file

@ -40,7 +40,7 @@ class DnsTransip extends Base implements LeValidationInterface
public function prepare()
{
$configdir = (string)sprintf(self::ACME_CONFIG_DIR, $this->cert_id);
$secret_key_filename = "{$configdir}/secret.key";
$secret_key_filename = "{$configdir}secret.key";
$secret_key_data = (string)$this->config->dns_transip_key . "\n";
file_put_contents($secret_key_filename, $secret_key_data);

6
security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/HttpOpnsense.php
View file

@ -127,10 +127,10 @@ class HttpOpnsense extends Base implements LeValidationInterface
}
// Create temporary port forward to allow acme challenges to get through
File::file_put_contents("{$configdir}/acme_anchor_setup", "rdr-anchor \"acme-client\"\n", 0600);
File::file_put_contents("{$configdir}acme_anchor_setup", "rdr-anchor \"acme-client\"\n", 0600);
Shell::run_safe('/sbin/pfctl -f %s', ["{$configdir}/acme_anchor_setup"]);
File::file_put_contents("{$configdir}/acme_anchor_rules", $anchor_rules, 0600);
Shell::run_safe('/sbin/pfctl -a %s -f %s', ['acme-client', "{$configdir}/acme_anchor_rules"]);
File::file_put_contents("{$configdir}acme_anchor_rules", $anchor_rules, 0600);
Shell::run_safe('/sbin/pfctl -a %s -f %s', ['acme-client', "{$configdir}acme_anchor_rules"]);
}
public function cleanup()

6
security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/TlsalpnAcme.php
View file

@ -128,10 +128,10 @@ class TlsalpnAcme extends Base implements LeValidationInterface
}
// Create temporary port forward to allow acme challenges to get through
File::file_put_contents("{$configdir}/acme_anchor_setup", "rdr-anchor \"acme-client\"\n", 0600);
File::file_put_contents("{$configdir}acme_anchor_setup", "rdr-anchor \"acme-client\"\n", 0600);
Shell::run_safe('/sbin/pfctl -f %s', ["{$configdir}/acme_anchor_setup"]);
File::file_put_contents("{$configdir}/acme_anchor_rules", $anchor_rules, 0600);
Shell::run_safe("/sbin/pfctl -a %s -f %s", ['acme-client', "{$configdir}/acme_anchor_rules"]);
File::file_put_contents("{$configdir}acme_anchor_rules", $anchor_rules, 0600);
Shell::run_safe("/sbin/pfctl -a %s -f %s", ['acme-client', "{$configdir}acme_anchor_rules"]);
}
public function cleanup()