| commit | 08932836f36d58ce175a926d0706171db21a036d | [log] [tgz] |
|---|---|---|
| author | Paulo Koch <pkoch@lifeonmars.pt> | Fri Mar 17 10:06:42 2017 +0000 |
| committer | Paulo Koch <paulo.koch@gmail.com> | Wed Apr 05 11:02:01 2017 +0100 |
| tree | c86c28d7ddae7ad8ac5d8efbf6754446a2f59239 | |
| parent | 1b65e17999b119369ff63fd9917d6e2fe2776b18 [diff] |
Add my janky tester
It's expected that the root hosted zone for the domain in question already exists in your account.
Create a virtual environment
Update its pip and setuptools (VENV/bin/pip install -U setuptools pip) to avoid problems with cryptography's dependency on setuptools>=11.3.
Make sure you have libssl-dev and libffi (or your regional equivalents) installed. You might have to set compiler flags to pick things up (I have to use CPPFLAGS=-I/usr/local/opt/openssl/include LDFLAGS=-L/usr/local/opt/openssl/lib on my macOS to pick up brew's openssl, for example).
Install this package.
Make sure you have access to AWS's Route53 service, either through IAM roles or via .aws/credentials. Check out (sample-aws-policy.json)[sample-aws-policy.json].
To generate a certificate:
certbot certonly \ -n --agree-tos --email DEVOPS@COMPANY.COM \ -a certbot-route53:auth \ -d MY.DOMAIN.NAME