Updated Profile selection (markdown)

neil
2025-11-23 12:04:00 +01:00
parent a164cc01b8
commit b8d24e07ec

@@ -17,7 +17,9 @@ acme.sh --list-profiles
## Example (Lets Encrypt) ## Example (Lets Encrypt)
``` ```
acme.sh --issue --server letsencrypt -d example.com -w /home/username/public_html --cert-profile tlsserver acme.sh --issue --server letsencrypt -d example.com \
-w /home/username/public_html \
--cert-profile tlsserver
``` ```
This will request a certificate using Lets Encrypts tlsserver profile. This will request a certificate using Lets Encrypts tlsserver profile.
@@ -27,7 +29,10 @@ Some profiles may reduce the validity period of the certificate (e.g. 160 hours
When using such profiles, you should also set the `--days` parameter to ensure that acme.sh renews the certificate early enough: When using such profiles, you should also set the `--days` parameter to ensure that acme.sh renews the certificate early enough:
``` ```
acme.sh --issue --server letsencrypt -d 203.0.113.195 -w /home/username/public_html --certificate-profile shortlived --days 6 acme.sh --issue --server letsencrypt -d 203.0.113.195 \
-w /home/username/public_html \
--certificate-profile shortlived \
--days 6
``` ```
## Notes ## Notes
@@ -35,3 +40,4 @@ acme.sh --issue --server letsencrypt -d 203.0.113.195 -w /home/username/public_h
- The available profile names depend on the selected CA. - The available profile names depend on the selected CA.
- If you do not specify `--cert-profile`, the default profile is used. - If you do not specify `--cert-profile`, the default profile is used.
- Always check your CAs documentation for supported profile names and their characteristics. - Always check your CAs documentation for supported profile names and their characteristics.