github
/
acme.sh
mirror of https://github.com/acmesh-official/acme.sh
1
0
Fork 0
Code Issues Releases Wiki Activity

Replaced all occurrences of github.com/Neilpang with github.com/acmesh-official

master
Martinique 2020-07-05 04:42:32 +03:00
parent 225ce4e287
commit b0860e818e
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Usage-on-Tomato-routers.md

@ -6,10 +6,10 @@ Much of the setup is done through SSH, but you'll also need Tomato's web admin,
### Prerequisites
- A router with USB ports running [FreshTomato](https://www.linksysinfo.org/index.php?threads/fork-freshtomato-arm.74117/) or another recent Tomato fork with a fully featured OpenSSL and web server. A fast CPU is recommended. There are [unconfirmed reports](https://github.com/acmesh-official/acme.sh/issues/1581#issuecomment-651678412) of MIPS-based routers having problems.
- Unless you happen to have a static public IP, you need a dynamic DNS (DDNS) service configured in Tomato. Some [DNS services](https://community.letsencrypt.org/t/dns-providers-who-easily-integrate-with-lets-encrypt-dns-validation/86438) also provide API control, enabling [DNS mode](https://github.com/Neilpang/acme.sh/wiki/dnsapi) for acme.sh. You can point additional regular CNAME records to the DDNS hostname, so not all your hostnames need to be dynamic.
- Unless you happen to have a static public IP, you need a dynamic DNS (DDNS) service configured in Tomato. Some [DNS services](https://community.letsencrypt.org/t/dns-providers-who-easily-integrate-with-lets-encrypt-dns-validation/86438) also provide API control, enabling [DNS mode](https://github.com/acmesh-official/acme.sh/wiki/dnsapi) for acme.sh. You can point additional regular CNAME records to the DDNS hostname, so not all your hostnames need to be dynamic.
- At least one plain HTTP web service or site running on either a LAN host or Tomato itself. It's a good idea to assign static IP addresses for servers.
If you're going to [issue certificates](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert) using webroot mode, Tomato's web server must be running in port 80, so make sure your service provider doesn't block that port and that the web admin service is not using the same port.
If you're going to [issue certificates](https://github.com/acmesh-official/acme.sh/wiki/How-to-issue-a-cert) using webroot mode, Tomato's web server must be running in port 80, so make sure your service provider doesn't block that port and that the web admin service is not using the same port.
**Standalone modes won't work**, as there's no `socat` in Tomato (without [entware](https://github.com/Entware/Entware/wiki)).
@ -22,7 +22,7 @@ You could use Tomato's [JFFS partition](http://tomatousb.org/doc:jffs) instead o
SSH to your Tomato and paste these commands to download and extract acme.sh:
```sh
cd /tmp/mnt/flash
wget https://github.com/Neilpang/acme.sh/archive/master.zip
wget https://github.com/acmesh-official/acme.sh/archive/master.zip
unzip master.zip
rm master.zip
cd acme.sh-master
@ -69,7 +69,7 @@ Webroot mode:
```sh
acme.sh --issue -d tomato.example.com -d www.tomato.example.com -w /tmp/mnt/flash/www
```
DNS mode (see [the guide](https://github.com/Neilpang/acme.sh/wiki/dnsapi)):
DNS mode (see [the guide](https://github.com/acmesh-official/acme.sh/wiki/dnsapi)):
```sh
acme.sh --issue -d tomato.example.com -d www.tomato.example.com --dns dns_xxxx
```