34

Home

neil edited this page 2026-05-01 15:12:07 +02:00

Table of Contents

• What's new
• 1. How to install
• 2. How to use in Proxmox ?
• 3. How to get pkcs12(pfx) format:
• 4. How to run on Windows with Cygwin or git bash.
• 5. License

Welcome to the acme.sh wiki!

https://wiki.acme.sh

Here is the wiki page for acme.sh

What's new

• 📡 ARI auto-renewal (RFC 9773) — acme.sh now follows the CA's renewalInfo endpoint automatically. No flag, no opt-in. Lets the CA shift renewals forward in case of an incident.
• 📌 DNS persist mode — publish one TXT record once, renew forever without DNS API and without per-renewal manual edits. Implements draft-ietf-acme-dns-persist-01.

1. How to install

https://github.com/acmesh-official/acme.sh/wiki/How-to-install

Docker install: https://github.com/acmesh-official/acme.sh/wiki/Run-acme.sh-in-docker

2. How to use in Proxmox ?

After installation,

1. Check if port 80 is opened on Proxmox host.

2. Issue a cert:

/root/.acme.sh/acme.sh  --issue  --standalone  -d <DOMAIN>

After issuing, the cert will be automatically renewed (every ~30 days, or earlier if the CA's ARI endpoint advises so).

3. Install the cert to Proxmox:

/root/.acme.sh/acme.sh  --installcert  -d <DOMAIN>  \
    --certpath /etc/pve/local/pveproxy-ssl.pem \
    --keypath /etc/pve/local/pveproxy-ssl.key  \
     --capath  /etc/pve/local/pveproxy-ssl.pem  \
      --reloadcmd  "systemctl restart pveproxy"

Ok, it's done. Open the link: https://<DOMAIN>:8006

3. How to get pkcs12(pfx) format:

After you issue the cert, you can use the toPkcs command to convert the cert to pkcs12(pfx) format

acme.sh  --toPkcs  -d <domain>  [--password pfx-password]

Important note: If you do not specify a password on the command line, OpenSSH itself will prompt you for one and the pkcs12(pfx) file will be generated. However, it will not be regenerated during certificate renewal. You must specify a non-blank password on the command line in order for acme.sh to regenerate the pkcs12(pfx) when renewing certificates.

4. How to run on Windows with Cygwin or git bash.

1. Download cygwin installer: setup-x86.exe or setup-x86_64.exe from: https://cygwin.com/

2. In the installer, select: Net: curl and Net: socat to install.

3. After install finished, you can open the Cygwin window and use curl to install acme.shonline: https://github.com/acmesh-official/acme.sh/wiki#1-how-to-install

4. A scheduler task will be installed in your Windows scheduler to renew your certs.

5. License

Copyright: acme.sh wiki contributors

License: GNU General Public License version 3 or any later version