TLS et ACME

Fluxheim TLS cum testimoniis staticis servire potest aut testimonia ACME pro te administrare.

Testimonia administrata

[[vhosts]]
name = "site"
hosts = ["example.com"]

[vhosts.tls]
acme = true
email = "admin@example.com"
storage = "/var/lib/fluxheim/acme"

ACME salus et lifecycle

Fluxheim 1.7.9 ACME directoria constitutionis confirmat ac expressam consensum requirit ad exactos terminos ab auctore editas ante rationem faciendi. Ratio setup, libellum publicationis, deactivationis et revocationis usum transactionum recuperandorum.

[[tls.acme.issuers]]
name = "letsencrypt"
directory_url = "https://acme-v02.api.letsencrypt.org/directory"
terms_of_service_agreed = true
terms_of_service_url = "https://letsencrypt.org/repository/"

Confirmare current URL ab issuer coram instruere. Mutata vel mismatcha concordia rejicienda est.

Moderare et ponere ACME

fluxheim-acme --config /etc/fluxheim/fluxheim.toml doctor
fluxheim-acme --config /etc/fluxheim/fluxheim.toml doctor --online
fluxheim-acme --config /etc/fluxheim/fluxheim.toml renew
fluxheim-acme --config /etc/fluxheim/fluxheim.toml revoke --vhost example.com --confirm

Online impedimenta ab hoc servo currunt et magna vigilantia externa non restituunt. Revocatio quarentinarum par certificatorium tractatum et petit a reload; install tortor jugis normalis officium.

Electiones TLS

Electio	Utere cum
`rustls`	You want the normal memoria-tutum TLS semita.
`openssl`	Opus provisoris OpenSSL fini.
`modern`	Tantum moderni clientes TLS coniungere debent.
`intermediate`	You want the praedefinitum production compatibility profile.
`compat`	TLS 1.2 compatibilitas expressa servare debes.

Exemplum testimonii statici

[server]
tls_listen = ["0.0.0.0:8443"]

[[vhosts]]
name = "site"
hosts = ["example.com"]

[vhosts.tls]
cert_path = "/etc/fluxheim/tls/fullchain.pem"
key_path = "/etc/fluxheim/tls/privkey.pem"

Revocatio certificati clientis

Cum TLS mutuum certificata clientium revocata recusare debet, fasciculum PEM CRL intra fines praebe. Fluxheim integram catenam editoris validat atque rationem CRL exspiratam vel incompletam recusat.

[vhosts.tls.client_auth]
mode = "required"
ca_path = "/etc/fluxheim/tls/client-ca.pem"
crl_path = "/etc/fluxheim/tls/client-crls.pem"

Authenticatio clientis necessaria in modo obsequii FIPS vel ISO etiam fasciculum CRL postulat. Authenticatio ordinaria clientis revocationem electionem explicitam retinet.

Antequam ACME activetur

Cura ut DNS publicum ad hunc ministrum demonstret.
Permitte trafficum provocationum HTTP-01 aut TLS-ALPN-01.
Monta statum ACME ut repositorium persistens scribibile.
Use externally issued testimonia pro strictum FIPS aut ISO-required boundaries.