Acme updates -- Allow for External Account Binding

[misilot]

Adds support for External Account Binding with ACME

Allows for the support of External Account Binding to request SSL Certificates through a provider that supports EAB and ACME.

Some example providers include InCommon and ZeroSSL

I also exposed the TRAEFIK_LOG_LEVEL in the sample.env instead of hiding it.

Possible test plan:

Ensure existing setups still work:

1. Merge code
2. remove acme directory if it already exists
3. run make -B docker-compose.yml
4. run make up
5. Visit website, and ensure have an SSL cert from Let's Encrypt that is valid starting from date tested (should expire in 90 days)

Ensure new SSL Certificate from an ACME provider with an External Account Binding (EAB)works

1. Merge code
2. remove acme directory if it already exists
3. Add in valid values for ACME_SERVER, ACME_EAB_KID, ACME_EAB_HMAC
4. run make -B docker-compose.yml
5. run make up
6. Visit website, and ensure have an SSL cert from your SSL provider that is valid starting from date tested

For more info about EAB from Traefik please visit https://doc.traefik.io/traefik/https/acme/#external-account-binding

For some info about EAB and ACME from ZeroSSL please see https://zerossl.com/documentation/acme/ ... I have an Incommon account, so I did not look into ZeroSSL, but assuming it is a similar setup??

Related Tickets

#253 (Merged)
#252
Islandora/documentation#2096

[misilot]

Directions for testing using a ZeroSSL Account. This assumes your server is web accessible from the general internet, and a valid domain resolves. If using AWS, I assume you can use the ec2 address that is automatically provisioned without having a custom domain name.

1. Apply patch for Acme updates -- Allow for External Account Binding #253 first.
2. Register for Account at zerossl.com
3. Go to https://app.zerossl.com/developer and Generate EAB credentials at bottom of page.
4. Save KID and HMAC values
5. Update .env file with the following values ACME_EAB_KID=, ACME_EAB_HMAC=, DOMAIN=, and ACME_SERVER=https://acme.zerossl.com/v2/DV90
6. Run make -B docker-compose.yml
7. Run make up
8. Go to website and verify you have a valid SSL certificate issues from ZeroSSL.

[DonRichards]

Having difficulty registering a domain with zerossl.com

[misilot]

Just curious if there is any chance of getting this merged "as-is", since it should be a no-op for those that don't use it?

[misilot]

Thank you @DonRichards!