Files
cheatsheet-tldr/tldr/acme.sh
2026-01-05 00:24:05 +00:00

39 lines
1.4 KiB
Bash

---
syntax: markdown
tags: [tldr, common]
source: https://github.com/tldr-pages/tldr.git
---
# acme.sh
> Shell script implementing ACME client protocol, an alternative to `certbot`.
> See also: `acme.sh dns`.
> More information: <https://github.com/acmesh-official/acme.sh#2-just-issue-a-cert>.
- Issue a certificate using webroot mode:
`acme.sh --issue {{[-d|--domain]}} {{example.com}} {{[-w|--webroot]}} /{{path/to/webroot}}`
- Issue a certificate for multiple domains using standalone mode using port 80:
`acme.sh --issue --standalone {{[-d|--domain]}} {{example.com}} {{[-d|--domain]}} {{www.example.com}}`
- Issue a certificate using standalone TLS mode using port 443:
`acme.sh --issue --alpn {{[-d|--domain]}} {{example.com}}`
- Issue a certificate using a working `nginx` configuration:
`acme.sh --issue --nginx {{[-d|--domain]}} {{example.com}}`
- Issue a certificate using a working Apache configuration:
`acme.sh --issue --apache {{[-d|--domain]}} {{example.com}}`
- Issue a wildcard (\*) certificate using an automatic DNS API mode:
`acme.sh --issue --dns {{dns_cf}} {{[-d|--domain]}} {{*.example.com}}`
- Install certificate files into the specified locations (useful for automatic certificate renewal):
`acme.sh {{[-i|--install-cert]}} {{[-d|--domain]}} {{example.com}} --key-file /{{path/to/example.com.key}} --fullchain-file /{{path/to/example.com.cer}} --reloadcmd "{{systemctl force-reload nginx}}"`