vault-acme

KO | EN

gitlite — search

#python #java #swift #golang #nodejs #android #game #react #machine-learning #tensorflow #javascript #json

★ 97 Open GitHub ↗

No description available.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Vault ACME

**This plugin has not been properly reviewed and should not be used in production.**

Vault ACME is a [Vault](https://www.vaultproject.io/) secret engine that allow
users and application to retrieve TLS certificates validated by an [ACME provider](https://tools.ietf.org/html/rfc8555)
like [Let's Encrypt](https://letsencrypt.org/) without having to give each
applications permission to modify DNS and using Vault's audit and policy systems.

Discussion: https://github.com/hashicorp/vault/issues/4950

## Download Vault ACME

Binary releases can be downloaded at https://github.com/remilapeyre/vault-acme/releases.

## Documentation

The documentation is available at [`website/source/docs/secrets/acme/index.html.md`](https://github.com/remilapeyre/vault-acme/blob/master/website/source/docs/secrets/acme/index.html.md).

## How to use this plugin

Using this plugin in Docker requires to manually set the `mlock` file capability
to both Vault and the acme plugin:

```sh
$ sudo setcap cap_ipc_lock=+ep $(readlink -f $(which vault))
$ sudo setcap cap_ipc_lock=+ep /vault/plugins/acme-plugin
```

After setting [`plugin_directory`](https://www.vaultproject.io/docs/configuration/#plugin_directory)
and setting the correct shasum in Vault (`vault write sys/plugins/catalog/secret/acme sha_256=$(sha256sum acme-plugin) command=acme-plugin`)
you can mount the plugin like any other: `vault secrets enable -path acme -plugin-name acme plugin`.

## Tests

The unit tests will use the `pebble` ACME test server and `pebble-challtestsrv`.
They can be downloaded at https://github.com/letsencrypt/pebble and must be
present in `$PATH`.

The unit tests can be run with:

```bash
$ make test
```

The acceptance tests needs Vault in addition to `pebble` and `pebble-challtestsrv`.

When `vault` is present in `$PATH` the acceptance tests can be run with:

```bash
$ make testacc
```

vault-acme

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README