Package: manuale
manuale is a fully manualLet’s
Encrypt/ACMEclient for advanced users. It is intended to be used by a human in a
manual workflow and contains no automation features whatsoever.Why?Isn’t the point of Let’s Encrypt to be automatic and seamless? Maybe,
but here’s some reasons:You’re not comfortable with an automatic process handling something
as critical, or your complex infrastructure doesn’t allow it in the
first place.You already have perfect configuration management with something like
Ansible. Renewing is a matter of dropping in a new certificate. With
a manual client that works, it’s literally a minute of work.You want the traditional and authentic SSL installation experience of
copying files you don’t understand to your server, searching for
configuration instructions and praying that it works.FeaturesSimple interface with no hoops to jump through. Keys and certificate
signing requests are automatically generated: no more cryptic OpenSSL
one-liners. (However, you do need to know what to do with generated
certificates and keys yourself!)Support for DNS & HTTP validation. No need to figure out how to serve
challenge files from a live domain.Obviously, runs without root access. Use it from any machine you
want, it doesn’t care. Internet connection recommended.Awful, undiscoverable name.And finally, if theopensslbinary is your spirit animal after
all, you can still bring your own keys and/or CSR’s. Everybody wins.InstallationPython 3.3 or above is required.Using your package managerArch Linux: in theAUR.Fedora Linux:dnf install manuale.Gentoo
Linux.Package maintainers wanted: your package here?Using DockerThere is a Docker image on theDocker
Hub.Using pipYou can install the package fromPyPIusing thepiptool.
To do so, runpip3 install manuale.If you’re not using Windows or OS X pip may need to compile some of the
dependencies. In this case, you need a compiler and development headers
for Python, OpenSSL and libffi installed.On Debian-based distributions, these will typically begccpython3-devlibssl-devlibffi-dev, and on RPM-based
distributionsgccpython3-developenssl-devellibffi-devel.From the git repositorygit clone https://github.com/veeti/manuale ~/.manuale
cd ~/.manuale
python3 -m venv env
env/bin/python setup.py install
ln -s env/bin/manuale ~/.bin/(Assuming you have a~/.bin/directory in your$PATH).Quick startRegister an account (once):$ manuale register me@example.comAuthorize one or more domains:$ manuale authorize example.com
DNS verification required. Make sure these records are in place:
  _acme-challenge.example.com. IN TXT "(some random gibberish)"
Press enter to continue.
...
1 domain(s) authorized. Let's Encrypt!Get your certificate:$ manuale issue --output certs/ example.com
...
Certificate issued.

Expires: 2016-06-01
 SHA256: (more random gibberish)

Wrote key to certs/example.com.pem
Wrote certificate to certs/example.com.crt
Wrote certificate with intermediate to certs/example.com.chain.crt
Wrote intermediate certificate to certs/example.com.intermediate.crtSet yourself a reminder for renewal!UsageYou need to create an account once. To do so, callmanuale register [email]. This will create a new account key for
you. Follow the registration instructions.Once that’s done, you’ll have your account saved inaccount.jsonin
the current directory. You’ll need this to do anything useful. Oh, and
it contains your private key, so keep it safe and secure.manualeexpects the account file to be in your working directory by
default, so you’ll probably want to make a specific directory to do all
your certificate stuff in. Likewise, created certificates get saved in
the current path by default.Next up, verify the domains you want a certificate for withmanuale authorize [domain]. This will show you the DNS records you
need to create and wait for you to do it. For example, you might do it
forexample.comandwww.example.com.Once that’s done, you can finally get down to business. Runmanuale issue example.com www.example.comto get your certificate.
It’ll save the key, certificate and certificate with intermediate to the
working directory.There’s plenty of documentation inside each command. Runmanuale-hfor a list of commands andmanuale [command]-hfor details.See alsoBest practices for server
configurationConfiguration generator for common
serversTest your serverOther
clientsLicenseThe MIT License (MIT)Copyright © 2016-2017 Veeti PaananenPermission is hereby granted, free of charge, to any person obtaining a
copy of this software and associated documentation files (the
“Software”), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:The above copyright notice and this permission notice shall be included
in all copies or substantial portions of the Software.THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS
OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.