concert

concert

To use this tool you need to have a valid domain name. This tool doesn't support acme DNS challenges.

Concert is a console based certificate generating tool using letsencrypt, built using really simple ACME library.

Install

You need to have golang installed to compile concert.

$ go get -u github.com/minio/concert

How to run?

Generates certs in certs directory by default.

$ sudo concert gen <EMAIL> <DOMAIN>

Generate certificates in custom directory.

$ sudo concert gen --dir my-certs-dir <EMAIL> <DOMAIN>

Renew certificates in certs directory by default.

$ sudo concert renew <EMAIL>

Generate certificates in custom directory.

$ sudo concert renew --dir my-certs-dir <EMAIL>

Run a server with automatic renewal.

$ sudo concert server <EMAIL> <DOMAIN>

Concert requires root on all platforms other than Linux. On linux you can use setcap permissions to allow concert to have permissions to bind ports.

setcap cap_net_bind_service=+ep `which concert`