diff --git a/plugins/doc_fragments/_acme.py b/plugins/doc_fragments/_acme.py index 042f0045..ac0fe947 100644 --- a/plugins/doc_fragments/_acme.py +++ b/plugins/doc_fragments/_acme.py @@ -13,11 +13,12 @@ class ModuleDocFragment: BASIC = r""" notes: - Although the defaults are chosen so that the module can be used with the L(Let's Encrypt,https://letsencrypt.org/) CA, - the module can in principle be used with any CA providing an ACME endpoint, such as L(Buypass Go SSL,https://www.buypass.com/ssl/products/acme). - - So far, the ACME modules have only been tested by the developers against Let's Encrypt (staging and production), Buypass - (staging and production), ZeroSSL (production), and L(Pebble testing server,https://github.com/letsencrypt/Pebble). We - have got community feedback that they also work with Sectigo ACME Service for InCommon and with HARICA. If you experience problems with - another ACME server, please L(create an issue,https://github.com/ansible-collections/community.crypto/issues/new/choose) + the module can in principle be used with any CA providing an ACME endpoint. + - So far, the ACME modules have only been tested by the developers against Let's Encrypt (staging and production), + ZeroSSL (production), and L(Pebble testing server,https://github.com/letsencrypt/Pebble). + We have got community feedback that they also work with Sectigo ACME Service for InCommon and with HARICA. + If you experience problems with another ACME server, please + L(create an issue, https://github.com/ansible-collections/community.crypto/issues/new/choose) to help us supporting it. Feedback that an ACME server not mentioned does work is also appreciated. requirements: - either C(openssl) @@ -37,10 +38,8 @@ options: - The ACME directory to use. This is the entry point URL to access the ACME CA server API. - For safety reasons the default is set to the Let's Encrypt staging server (for the ACME v1 protocol). This will create technically correct, but untrusted certificates. - - "For Let's Encrypt, all staging endpoints can be found here: U(https://letsencrypt.org/docs/staging-environment/). - For Buypass, all endpoints can be found here: U(https://community.buypass.com/t/63d4ay/buypass-go-ssl-endpoints)." + - "For Let's Encrypt, all staging endpoints can be found here: U(https://letsencrypt.org/docs/staging-environment/)." - For B(Let's Encrypt), the production directory URL for ACME v2 is U(https://acme-v02.api.letsencrypt.org/directory). - - For B(Buypass), the production directory URL for ACME v2 and v1 is U(https://api.buypass.com/acme/directory). - For B(ZeroSSL), the production directory URL for ACME v2 is U(https://acme.zerossl.com/v2/DV90). - For B(Sectigo), the production directory URL for ACME v2 is U(https://acme-qa.secure.trust-provider.com/v2/DV). - For B(HARICA), the production directory URL for ACME v2 is U(https://acme.harica.gr/XXX/directory) with XXX being specific to your account. diff --git a/plugins/doc_fragments/_module_certificate.py b/plugins/doc_fragments/_module_certificate.py index 1299cd6d..32042be0 100644 --- a/plugins/doc_fragments/_module_certificate.py +++ b/plugins/doc_fragments/_module_certificate.py @@ -125,7 +125,7 @@ options: acme_directory: description: - - "The ACME directory to use. You can use any directory that supports the ACME protocol, such as Buypass or Let's Encrypt." + - "The ACME directory to use. You can use any directory that supports the ACME protocol, such as Let's Encrypt." - "Let's Encrypt recommends using their staging server while developing jobs. U(https://letsencrypt.org/docs/staging-environment/)." type: str default: https://acme-v02.api.letsencrypt.org/directory diff --git a/plugins/modules/acme_certificate.py b/plugins/modules/acme_certificate.py index 44f0ea78..c9fa7ef4 100644 --- a/plugins/modules/acme_certificate.py +++ b/plugins/modules/acme_certificate.py @@ -12,8 +12,8 @@ author: "Michael Gruener (@mgruener)" short_description: Create SSL/TLS certificates with the ACME protocol description: - Create and renew SSL/TLS certificates with a CA supporting the L(ACME protocol,https://tools.ietf.org/html/rfc8555), such - as L(Let's Encrypt,https://letsencrypt.org/) or L(Buypass,https://www.buypass.com/). The current implementation supports - the V(http-01), V(dns-01) and V(tls-alpn-01) challenges. + as L(Let's Encrypt,https://letsencrypt.org/). + The current implementation supports the V(http-01), V(dns-01) and V(tls-alpn-01) challenges. - To use this module, it has to be executed twice. Either as two different tasks in the same run or during two runs. Note that the output of the first run needs to be recorded and passed to the second run as the module argument O(data). - Between these two tasks you have to fulfill the required steps for the chosen challenge by whatever means necessary. For @@ -35,9 +35,6 @@ seealso: description: Documentation for the Let's Encrypt Certification Authority. Provides useful information for example on rate limits. link: https://letsencrypt.org/docs/ - - name: Buypass Go SSL - description: Documentation for the Buypass Certification Authority. Provides useful information for example on rate limits. - link: https://www.buypass.com/ssl/products/acme - name: Automatic Certificate Management Environment (ACME) description: The specification of the ACME protocol (RFC 8555). link: https://tools.ietf.org/html/rfc8555 diff --git a/plugins/modules/acme_certificate_order_create.py b/plugins/modules/acme_certificate_order_create.py index b0c791b0..d4ce2e19 100644 --- a/plugins/modules/acme_certificate_order_create.py +++ b/plugins/modules/acme_certificate_order_create.py @@ -14,9 +14,9 @@ short_description: Create an ACME v2 order description: - Creates an ACME v2 order. This is the first step of obtaining a new certificate with the L(ACME protocol,https://tools.ietf.org/html/rfc8555) from a Certificate - Authority such as L(Let's Encrypt,https://letsencrypt.org/) or - L(Buypass,https://www.buypass.com/). This module does not support ACME v1, the - original version of the ACME protocol before standardization. + Authority such as L(Let's Encrypt,https://letsencrypt.org/). + This module does not support ACME v1, the original version of the ACME protocol + before standardization. - The current implementation supports the V(http-01), V(dns-01) and V(tls-alpn-01) challenges. - This module needs to be used in conjunction with the @@ -55,10 +55,6 @@ seealso: description: Documentation for the Let's Encrypt Certification Authority. Provides useful information for example on rate limits. link: https://letsencrypt.org/docs/ - - name: Buypass Go SSL - description: Documentation for the Buypass Certification Authority. - Provides useful information for example on rate limits. - link: https://www.buypass.com/ssl/products/acme - name: Automatic Certificate Management Environment (ACME) description: The specification of the ACME protocol (RFC 8555). link: https://tools.ietf.org/html/rfc8555 diff --git a/plugins/modules/acme_certificate_order_finalize.py b/plugins/modules/acme_certificate_order_finalize.py index e32e05bd..08c41621 100644 --- a/plugins/modules/acme_certificate_order_finalize.py +++ b/plugins/modules/acme_certificate_order_finalize.py @@ -15,9 +15,8 @@ description: - Finalizes an ACME v2 order and obtains the certificate and certificate chains. This is the final step of obtaining a new certificate with the L(ACME protocol,https://tools.ietf.org/html/rfc8555) from a Certificate - Authority such as L(Let's Encrypt,https://letsencrypt.org/) or - L(Buypass,https://www.buypass.com/). This module does not support ACME v1, the - original version of the ACME protocol before standardization. + Authority such as L(Let's Encrypt,https://letsencrypt.org/). + This module does not support ACME v1, the original version of the ACME protocol before standardization. - This module needs to be used in conjunction with the M(community.crypto.acme_certificate_order_create) and. M(community.crypto.acme_certificate_order_validate) modules. @@ -32,10 +31,6 @@ seealso: description: Documentation for the Let's Encrypt Certification Authority. Provides useful information for example on rate limits. link: https://letsencrypt.org/docs/ - - name: Buypass Go SSL - description: Documentation for the Buypass Certification Authority. - Provides useful information for example on rate limits. - link: https://www.buypass.com/ssl/products/acme - name: Automatic Certificate Management Environment (ACME) description: The specification of the ACME protocol (RFC 8555). link: https://tools.ietf.org/html/rfc8555 diff --git a/plugins/modules/acme_certificate_order_info.py b/plugins/modules/acme_certificate_order_info.py index 5bb5dfb2..f7f6d9ca 100644 --- a/plugins/modules/acme_certificate_order_info.py +++ b/plugins/modules/acme_certificate_order_info.py @@ -15,9 +15,8 @@ description: - Obtain information for an ACME v2 order. This can be used during the process of obtaining a new certificate with the L(ACME protocol,https://tools.ietf.org/html/rfc8555) from a Certificate - Authority such as L(Let's Encrypt,https://letsencrypt.org/) or - L(Buypass,https://www.buypass.com/). This module does not support ACME v1, the - original version of the ACME protocol before standardization. + Authority such as L(Let's Encrypt,https://letsencrypt.org/). + This module does not support ACME v1, the original version of the ACME protocol before standardization. - This module needs to be used in conjunction with the M(community.crypto.acme_certificate_order_create), M(community.crypto.acme_certificate_order_validate), and diff --git a/plugins/modules/acme_certificate_order_validate.py b/plugins/modules/acme_certificate_order_validate.py index 9dfbefad..8d3e0285 100644 --- a/plugins/modules/acme_certificate_order_validate.py +++ b/plugins/modules/acme_certificate_order_validate.py @@ -15,9 +15,8 @@ description: - Validates pending authorizations of an ACME v2 order. This is the second to last step of obtaining a new certificate with the L(ACME protocol,https://tools.ietf.org/html/rfc8555) from a Certificate - Authority such as L(Let's Encrypt,https://letsencrypt.org/) or - L(Buypass,https://www.buypass.com/). This module does not support ACME v1, the - original version of the ACME protocol before standardization. + Authority such as L(Let's Encrypt,https://letsencrypt.org/). + This module does not support ACME v1, the original version of the ACME protocol before standardization. - This module needs to be used in conjunction with the M(community.crypto.acme_certificate_order_create) and M(community.crypto.acme_certificate_order_finalize) modules. @@ -32,10 +31,6 @@ seealso: description: Documentation for the Let's Encrypt Certification Authority. Provides useful information for example on rate limits. link: https://letsencrypt.org/docs/ - - name: Buypass Go SSL - description: Documentation for the Buypass Certification Authority. - Provides useful information for example on rate limits. - link: https://www.buypass.com/ssl/products/acme - name: Automatic Certificate Management Environment (ACME) description: The specification of the ACME protocol (RFC 8555). link: https://tools.ietf.org/html/rfc8555