5 ms·

I'm the author of acmetool. It's quite interesting to know that people are using the design to its full potential. Ideally, I should probably make something mo

by hlandau 11y ago

I'm the author of acmetool. It's quite interesting to know that people are using the design to its full potential. Ideally, I should probably make something more library/daemon-based for these largescale, custom solutions, though of course I'd like to do it some manner of modular way that allows the existing codebase to be leveraged. For the time being only the acmeapi package within acmetool is stable and suitable for use by other libraries. Something to think about...

mholt 11y ago
We should join forces with https://github.com/mholt/certs https://github.com/mholt/certs then. (Still in design phase.)
- hlandau 11y ago
  I've done some thinking on what makes sense and ended up at this very rough first sketch. Comments welcome. https://gist.github.com/hlandau/ed6a96150c69945143be https://gist.github.com/hlandau/ed6a96150c69945143be
pilif 11y ago
For me, the current interface is perfect (though I wouldn't call our usage large-scale by a long shot), though it would be even better if acmetool would indicate using the exit code whether the web server needs restarting or not after reconciliation. I know there are the hooks and that's what I'm using now, but if I could get a distinct exit code to tell me that changes happened to the certificate store, then I could get away without needing to also keeping the hooks around. That said, this should probably be on your github issues, not in here. That also said: This was such a small issue for me that I didn't even want to bother you - but as you're coming here to post, I guess it doesn't hurt :p
- hlandau 11y ago
  I can't use the exit code, because a nonzero exit code by UNIX convention indicates failure, which will spam people in their cron jobs. There's only one exit code which conventionally means 'success'. I could modify acmetool to output a word 'NEEDS-RELOADING' or something, which you could grep for programmatically. But this is another option (it would have to be an option; any output from acmetool is liable to get e. mailed to people via cron) for something which can be, as you yourself admit, dealt with as well via hooks. And probably more robustly, too. So on balance, I don't think it's worth doing.

by hlandau 11y ago

mholt 11y ago

We should join forces with https://github.com/mholt/certs https://github.com/mholt/certs then. (Still in design phase.)

hlandau 11y ago
I've done some thinking on what makes sense and ended up at this very rough first sketch. Comments welcome. https://gist.github.com/hlandau/ed6a96150c69945143be https://gist.github.com/hlandau/ed6a96150c69945143be

pilif 11y ago

For me, the current interface is perfect (though I wouldn't call our usage large-scale by a long shot), though it would be even better if acmetool would indicate using the exit code whether the web server needs restarting or not after reconciliation. I know there are the hooks and that's what I'm using now, but if I could get a distinct exit code to tell me that changes happened to the certificate store, then I could get away without needing to also keeping the hooks around. That said, this should probably be on your github issues, not in here. That also said: This was such a small issue for me that I didn't even want to bother you - but as you're coming here to post, I guess it doesn't hurt :p

hlandau 11y ago
I can't use the exit code, because a nonzero exit code by UNIX convention indicates failure, which will spam people in their cron jobs. There's only one exit code which conventionally means 'success'. I could modify acmetool to output a word 'NEEDS-RELOADING' or something, which you could grep for programmatically. But this is another option (it would have to be an option; any output from acmetool is liable to get e. mailed to people via cron) for something which can be, as you yourself admit, dealt with as well via hooks. And probably more robustly, too. So on balance, I don't think it's worth doing.