opendev/system-config
Code Issues Proposed changes
1fd4deb76d
system-config/playbooks/roles/letsencrypt-acme-sh-install
History
Jeremy Stanley 8500dcf394 Patch acme.sh/4659 for arbitrary command execution 
Temporarily cherry-pick the commits which fix "acme.sh runs
arbitrary commands from a remote server"
https://github.com/acmesh-official/acme.sh/issues/4659 as trivial
backports on top of their 3.0.5 release until such time as we can
upgrade. This addresses a remote code execution vulnerability (no
CVE assigned yet) which could be exploited by the ACME protocol
operator, in our case the admins of the Let's Encrypt certificate
authority.

Change-Id: Ib052901a7aa08a9fdbd01d623f4b5d3eee938401
2023-06-11 20:41:11 +00:00
..
files letsencrypt: make acme.sh exits clearer 2022-08-05 08:18:55 +10:00
tasks Patch acme.sh/4659 for arbitrary command execution 2023-06-11 20:41:11 +00:00
README.rst Retry acme.sh cloning 2021-10-13 18:31:46 +00:00

README.rst

Install acme.sh client

This makes the acme.sh client available on the host.

Additionally a driver.sh script is installed to run the authentication procedure and parse output.

Role Variables