Index | Thread | Search

From:
Stuart Henderson <stu@spacehopper.org>
Subject:
Re: security/acme.sh: new port (version 3.0.9)
To:
Landry Breuil <landry@openbsd.org>, OpenBSD ports <ports@openbsd.org>
Date:
Thu, 14 Nov 2024 15:00:40 +0000

Download raw body.

Thread
On 2024/11/14 15:43, Kirill A. Korinsky wrote:
> On Thu, 14 Nov 2024 15:27:58 +0100,
> Stuart Henderson <stu@spacehopper.org> wrote:
> > 
> > CONFIGURE_STYLE is unused as it's a NO_BUILD port, so better to
> > remove it.
> >
> 
> Done.
> 
> > > I'd just like to stress loudly that by default acme.sh uses zerossl and
> > > not letsencrypt CA, cf https://github.com/acmesh-official/acme.sh/wiki/Change-default-CA-to-ZeroSSL
> > > dunno if thats better/worse but important to know imo.
> > 
> > Yes, I think I'd mention that in DESCR.
> >
> 
> Agreed that it worth to mention in DESCR.
> 
> Attached a new version which addressed that remarks.
> 
> Ok?

That does make it sound a bit like it's ZeroSSL-only. How about adding
a wiki link?

Note that acme.sh uses ZeroSSL as the certificate authority by default.
See https://github.com/acmesh-official/acme.sh/wiki/Server if you would
like to use Let's Encrypt or another CA.

With that or similar, OK sthen.