ACME Clients - dogtagpki/pki GitHub Wiki
To get ACME directory:
$ curl -s https://pki.demo.dogtagpki.org/acme/directory | python -m json.tool { "newNonce": "https://pki.demo.dogtagpki.org/acme/new-nonce", "newAccount": "https://pki.demo.dogtagpki.org/acme/new-account", "newOrder": "https://pki.demo.dogtagpki.org/acme/new-order", "newAuthz": "https://pki.demo.dogtagpki.org/acme/new-authz", "revokeCert": "https://pki.demo.dogtagpki.org/acme/revoke-cert", "keyChange": "https://pki.demo.dogtagpki.org/acme/key-change", "meta": { "termsOfService": "https://www.dogtagpki.org/wiki/PKI_ACME_Responder", "website": "https://www.dogtagpki.org", "caaIdentities": [ "dogtagpki.org" ], "externalAccountRequired": false } }
To get new nonce:
$ curl -v https://pki.demo.dogtagpki.org/acme/new-nonce ... < Replay-Nonce: <nonce> ...
To get account orders:
$ curl -s -X POST https://pki.demo.dogtagpki.org/acme/acct/<account>/orders | python -m json.tool { "orders": [ "https://pki.demo.dogtagpki.org/acme/order/<order>", ... "https://pki.demo.dogtagpki.org/acme/order/<order>" ] }
See Certbot.
$ acme.sh --issue -d example.com -d www.example.com -w /home/wwwroot/example.com