[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Certbot with alternative certificate authority

From: Jack Hill
Subject: Certbot with alternative certificate authority
Date: Thu, 5 Mar 2020 13:57:35 -0500 (EST)
User-agent: Alpine 2.20 (DEB 67 2015-01-07)

Hi Guix,

I'm working on making the certbot service work with any certificate authority that implements ACME, not just Let's Encrypt. I've done this by adding a server field to the certbot-configuration, and then using it in the match for certbot-command as follows:

diff --git a/gnu/services/certbot.scm b/gnu/services/certbot.scm
index 0d3be03383..3e71026387 100644
--- a/gnu/services/certbot.scm
+++ b/gnu/services/certbot.scm
@@ -70,6 +70,8 @@
   (certificates        certbot-configuration-certificates
                        (default '()))
   (email               certbot-configuration-email)
+  (server              certbot-configuration-server
+                       (default #f))
   (rsa-key-size        certbot-configuration-rsa-key-size
                        (default #f))
   (default-location    certbot-configuration-default-location
@@ -82,7 +84,7 @@
 (define certbot-command
     (($ <certbot-configuration> package webroot certificates email
-                                rsa-key-size default-location)
+                                server rsa-key-size default-location)
      (let* ((certbot (file-append package "/bin/certbot"))
             (rsa-key-size (and rsa-key-size (number->string rsa-key-size)))
@@ -101,6 +103,7 @@
                             "--cert-name" name
                             "-d" (string-join domains ","))
+                      (if server `("--server" ,server) '())
                       (if rsa-key-size `("--rsa-key-size" ,rsa-key-size) '())
                       (if authentication-hook
                           `("--manual-auth-hook" ,authentication-hook)
@@ -113,6 +116,7 @@
                             "--webroot" "-w" webroot
                             "--cert-name" name
                             "-d" (string-join domains ","))
+                      (if server `("--server" ,server) '())
                       (if rsa-key-size `("--rsa-key-size" ,rsa-key-size) '())
                       (if deploy-hook `("--deploy-hook" ,deploy-hook) '()))))))

However, reconfiguring with the following certbot service:

(service certbot-service-type
                   (email "address@hidden")
                   (rsa-key-size 4096)
                   (server "";)
                      (domains '("")))))))

fails with:

           1 (primitive-load "/tmp/cerbot-test2/bin/guix")
In guix/ui.scm:
  1826:12  0 (run-guix-command _ . _)

guix/ui.scm:1826:12: In procedure run-guix-command:
Throw to key `match-error' with args `("match" "no matching pattern" 4096)'.

When removing "(rsa-key-size 4096)" from my configuration, everthing works as expected with the default key size.

What error have I made?


reply via email to

[Prev in Thread] Current Thread [Next in Thread]