aboutsummaryrefslogtreecommitdiffstats
path: root/lacme-accountd.md
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2016-12-01 10:42:23 +0100
committerGuilhem Moulin <guilhem@fripost.org>2016-12-01 10:42:23 +0100
commit39031bb2a02789a956bf1ab3cbe092e4f17e1758 (patch)
tree763d243d85aa9e60946b8c38f68248e7340d8f20 /lacme-accountd.md
parent5b8c13bf44f7f1235f2dd0cec1f7f7e2c1a13a9e (diff)
parent8faab5db6571972156f45b5838b23dbb0fadd5c4 (diff)
Merge branch 'master' into debian
Diffstat (limited to 'lacme-accountd.md')
-rw-r--r--lacme-accountd.md12
1 files changed, 6 insertions, 6 deletions
diff --git a/lacme-accountd.md b/lacme-accountd.md
index 81c0802..4d3e1a5 100644
--- a/lacme-accountd.md
+++ b/lacme-accountd.md
@@ -58,15 +58,15 @@ Options
The following command can be used to generate a new 4096-bits RSA
key in PEM format with mode 0600:
- openssl genrsa 4096 | install -m0600 /dev/stdin /path/to/priv.key
+ openssl genrsa 4096 | install -m0600 /dev/stdin /path/to/account.key
-`-socket=`*path*
+`--socket=`*path*
: Use *path* as the UNIX-domain socket to bind against for signature
requests from the [ACME] client. `lacme-accountd` aborts if *path*
exists or if its parent directory is writable by other users.
-`-?`, `--help`
+`-h`, `--help`
: Display a brief help and exit.
@@ -117,17 +117,17 @@ Examples
Run `lacme-accountd` in a first terminal:
- ~$ lacme-accountd --privkey=file:/path/to/priv.key --socket=/run/user/1000/S.lacme
+ ~$ lacme-accountd --privkey=file:/path/to/account.key --socket=$XDG_RUNTIME_DIR/S.lacme
Then, while `lacme-accountd` is running, execute locally [`lacme`(1)] in
another terminal:
- ~$ sudo lacme --socket=/run/user/1000/S.lacme new-cert
+ ~$ sudo lacme --socket=$XDG_RUNTIME_DIR/S.lacme new-cert
Alternatively, use [OpenSSH] 6.7 or later to forward the socket and
execute [`lacme`(1)] remotely:
- ~$ ssh -oExitOnForwardFailure=yes -tt -R /path/to/remote.sock:/run/user/1000/S.lacme user@example.org \
+ ~$ ssh -oExitOnForwardFailure=yes -tt -R /path/to/remote.sock:$XDG_RUNTIME_DIR/S.lacme user@example.org \
sudo lacme --socket=/path/to/remote.sock new-cert
See also