acme_srv.cfg

configuration options for acme2certifier

Section	Option	Description	Values	default
`DEFAULT`	`debug`	Debug mode	True/False	False
`DEFAULT`	`proxy_server_list`	Proxy-server configuration	{"bar.local$": "http://10.0.0.1:3128", "foo.local$": "socks5://10.0.0.1:1080"}	None
`Account`	`ecc_only`	mandates the usage of ECC for account key generation	True/False	False
`Account`	`inner_header_nonce_allow`	allow nonce header on inner JWS during key-rollover	True/False	False
`Account`	`tos_check_disable`	turn off "Terms of Service" acceptance check	True/False	False
`Authorization`	`expiry_check_disable`	Disable authorization expiration	True/False	False
`Authorization`	`validity`	authorization validity in seconds	Integer	86400
`CAhandler`	`handler_file`	path and name of ca_handler file to be loaded. If not specified `acme_srv/ca_handler.py` will be loaded	examples/ca_handler/openssl_hander.py	`acme_srv/ca_handler.py`
`DBhandler`	`dbfile`	path and name of dabase file. If not specified `acme_srv/acme_srv.db` will be used. Parameter is only available for a wsgi handler and will be ignored if django handler is getting used	'acme/databse.db'	`acme_srv/acme_srv.db`
`Certificate`	`revocation_reason_check_disable`	disable the check of revocation reason	True/False	False
`Certificate`	`cert_reusage_timeframe`	in case a csr will be resend within this timeframe (in seconds) the certificate already stored in the database will be returned and no enrollment will be triggered	Integer	0 (disabled)
`Certificate`	`enrollment_timeout`	timeout in second for asynchronous ca_handler threat	Integer	5
`Challenge`	`challenge_validation_disable`	disable challenge validation via http or dns. THIS IS A SEVERE SECURITY ISSUE! Please enable for testing/debugging purposes only.	True/False	False
`Challenge`	`dns_server_list`	Use own dns servers for name resolution during challenge verification	["ip1", "ip2"]	[]
`Directory`	`supress_version`	Do not show version information when fetching the directory resource	True/False	False
`Directory`	`tos_url`	Terms of Service URL	URL	None
`Directory`	`url_prefix`	url prefix for acme2certifier ressources	'/foo'	None
`Helper`	`log_format`	Format of logging information	check the 'LogRecord attributes' Section of the python logging module	`%(message)s`
`Message`	`signature_check_disable`	disable signature check of incoming JWS messages. THIS IS A SEVERE SECURTIY ISSUE bypassing security checks and allowing message manipulations during transit. Please enable for testing/debugging purposes only.	True/False	False
`Nonce`	`nonce_check_disable`	disable nonce check. THIS IS A SECURTIY ISSUE as it exposes the API for replay attacks! Should be enabled for testing/debugging purposes only.	True/False	False
`Order`	`expiry_check_disable`	Disable order expiration	True/False	False
`Order`	`retry_after_timeout`	Retry-After value to be send to client in case a certificate enrollment request gets pending on CA server	Integer	120
`Order`	`tnauthlist_support`	accept TNAuthList identifiers and challenges containing tkauth-01 type	True/False	False
`Order`	`validity`	Order validity in seconds	Integer	86400