github
/
acme.sh
mirror of https://github.com/acmesh-official/acme.sh
1
0
Fork 0
Code Issues Releases Wiki Activity

Updated Synology RT1900ac install guide (markdown)

master
Fernando Miguel 2016-09-30 10:05:01 +01:00
parent 18c1ff8a66
commit 0fef14ddc3
1 changed files with 9 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
Synology-RT1900ac-install-guide.md

@ -8,27 +8,26 @@ I've also used it with DNS01 protocol, which means, I don't have any ports open
Since the Router shell is very limited, there are several constraints. the most important of all, there is no cron/crontab. Since the Router shell is very limited, there are several constraints. the most important of all, there is no cron/crontab.
trying the default install trying the default install
$ wget -O - https://get.acme.sh | sh `$ wget -O - https://get.acme.sh | sh`
, will fail cause of cron. , will fail cause of cron.
so we have to do it manually so we have to do it manually
$ wget https://github.com/Neilpang/acme.sh/archive/master.tar.gz `$ wget https://github.com/Neilpang/acme.sh/archive/master.tar.gz`
$ tar xvf master.tar.gz `$ tar xvf master.tar.gz`
$ cd acme.sh-master/ `$ cd acme.sh-master/`
$ ./acme.sh --install --nocron `$ ./acme.sh --install --nocron`
so install is done :) so install is done :)
next, config next, config
$ cd ~/.acme.sh/ `$ cd ~/.acme.sh/`
$ vi acme.sh account.conf `$ vi acme.sh account.conf `
set your email, cloudflare account and API (https://www.cloudflare.com/a/account/my-account) set your email, cloudflare account and API (https://www.cloudflare.com/a/account/my-account)
ctrl+c ctrl+c
:wq (and you are out of VI(M) :wq (and you are out of VI(M)
now to create your cert now to create your cert
$ ./acme.sh --issue -d YOURDOMAIN.TLD --dns dns_cf --certpath /usr/syno/etc/ssl/ssl.crt/server.crt --keypath /usr/syno/etc/ssl/ssl.key/server.key --fullchainpath / `$ ./acme.sh --issue -d YOURDOMAIN.TLD --dns dns_cf --certpath /usr/syno/etc/ssl/ssl.crt/server.crt --keypath /usr/syno/etc/ssl/ssl.key/server.key --fullchainpath /usr/syno/etc/ssl/ssl.intercrt/server-ca.crt`
usr/syno/etc/ssl/ssl.intercrt/server-ca.crt
(anyone knows how to restart the webserver?) (anyone knows how to restart the webserver?)
simple right? simple right?
@ -36,7 +35,7 @@ simple right?
since there is no cron, the renewal still requires manual work. since there is no cron, the renewal still requires manual work.
I've added this line at the bottom of /etc/rc and ~/.profile I've added this line at the bottom of /etc/rc and ~/.profile
/root/.acme.sh/acme.sh --cron `/root/.acme.sh/acme.sh --cron`
so when the router is rebooted or you ssh into it, it tries to renew the cert. so when the router is rebooted or you ssh into it, it tries to renew the cert.
HTH HTH