1 Summary: letsencrypt/acme client implemented as a shell-script
6 Group: Applications/Networking
7 Source0: https://github.com/lukas2511/letsencrypt.sh/archive/v%{version}/%{name}-%{version}.tar.gz
8 # Source0-md5: 74974ab79d6879b92ba353bbf3d1257e
10 Source2: lighttpd.conf
16 URL: https://github.com/lukas2511/letsencrypt.sh
17 BuildRequires: rpmbuild(macros) >= 1.713
22 Requires: openssl-tools
25 Requires: webserver(access)
26 Requires: webserver(alias)
28 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
30 %define _webapps /etc/webapps
31 %define _webapp %{name}
32 %define _sysconfdir %{_webapps}/%{_webapp}
33 %define _appdir %{_datadir}/%{_webapp}
36 This is a client for signing certificates with an ACME-server
37 (currently only provided by letsencrypt) implemented as a relatively
41 - Signing of a list of domains
43 - Renewal if a certificate is about to expire or SAN (subdomains)
45 - Certificate revocation
52 rm -rf $RPM_BUILD_ROOT
53 install -d $RPM_BUILD_ROOT{%{_sbindir},%{_sysconfdir}/{acme-challenges,certs},/etc/cron.d}
55 install -p letsencrypt.sh $RPM_BUILD_ROOT%{_sbindir}
56 cp -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/apache.conf
57 cp -p %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/lighttpd.conf
58 cp -p %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}
59 cp -p %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}
60 cp -p %{SOURCE6} $RPM_BUILD_ROOT/etc/cron.d/letsencrypt
61 install -p %{SOURCE5} $RPM_BUILD_ROOT%{_sysconfdir}
62 cp -p $RPM_BUILD_ROOT%{_sysconfdir}/{apache,httpd}.conf
65 rm -rf $RPM_BUILD_ROOT
67 %triggerin -- apache1 < 1.3.37-3, apache1-base
68 %webapp_register apache %{_webapp}
70 %triggerun -- apache1 < 1.3.37-3, apache1-base
71 %webapp_unregister apache %{_webapp}
73 %triggerin -- apache < 2.2.0, apache-base
74 %webapp_register httpd %{_webapp}
76 %triggerun -- apache < 2.2.0, apache-base
77 %webapp_unregister httpd %{_webapp}
79 %triggerin -- lighttpd
80 %webapp_register lighttpd %{_webapp}
82 %triggerun -- lighttpd
83 %webapp_unregister lighttpd %{_webapp}
86 %defattr(644,root,root,755)
87 %doc README.md CHANGELOG LICENSE
88 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/cron.d/letsencrypt
89 %dir %attr(750,root,http) %{_sysconfdir}
90 %dir %attr(700,root,root) %{_sysconfdir}/certs
91 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/apache.conf
92 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/httpd.conf
93 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/lighttpd.conf
94 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/config.sh
95 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/domains.txt
96 %attr(750,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/hook.sh
97 # challenges written here from letsencrypt.sh, need to be readable by webserver
98 %dir %attr(751,root,root) %{_sysconfdir}/acme-challenges
100 %attr(755,root,root) %{_sbindir}/letsencrypt.sh