{"id":17383611,"url":"https://github.com/jirutka/cesnet-tcs-cli","last_synced_at":"2025-09-12T17:38:15.358Z","repository":{"id":65612847,"uuid":"185649891","full_name":"jirutka/cesnet-tcs-cli","owner":"jirutka","description":"CLI client utility for CESNET TCS API","archived":false,"fork":false,"pushed_at":"2021-06-16T12:04:47.000Z","size":76,"stargazers_count":5,"open_issues_count":0,"forks_count":0,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-06-08T05:09:31.175Z","etag":null,"topics":["certificates","cesnet","cesnet-tcs","shell","utility"],"latest_commit_sha":null,"homepage":"https://github.com/jirutka/cesnet-tcs-cli","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jirutka.png","metadata":{"files":{"readme":"README.adoc","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-05-08T17:19:44.000Z","updated_at":"2023-09-20T07:12:03.000Z","dependencies_parsed_at":"2023-01-31T19:05:11.799Z","dependency_job_id":null,"html_url":"https://github.com/jirutka/cesnet-tcs-cli","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/jirutka/cesnet-tcs-cli","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jirutka%2Fcesnet-tcs-cli","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jirutka%2Fcesnet-tcs-cli/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jirutka%2Fcesnet-tcs-cli/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jirutka%2Fcesnet-tcs-cli/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jirutka","download_url":"https://codeload.github.com/jirutka/cesnet-tcs-cli/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jirutka%2Fcesnet-tcs-cli/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269844098,"owners_count":24484132,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-11T02:00:10.019Z","response_time":75,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["certificates","cesnet","cesnet-tcs","shell","utility"],"created_at":"2024-10-16T07:43:15.133Z","updated_at":"2025-08-11T07:07:05.613Z","avatar_url":"https://github.com/jirutka.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"= CESNET TCS CLI\n:name: cesnet-tcs-cli\n:version: 0.4.0\n:gh-name: jirutka/{name}\n\nThis project provides CLI utility `cesnet-tcs` for requesting and fetching server certificates from https://tcs.cesnet.cz/en/[CESNET TCS] using https://pki.cesnet.cz/cs/tcs-api-documentation.html[TCS API].\nIt also provides ready-made cron scripts for complete automation of the certificates renewal before expiration.\n\n\n== Requirements\n\n* http://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html[POSIX-sh] compatible shell (e.g. Busybox ash, dash, ZSH, bash, …)\n* `grep`, `sed`, `tr` (both GNU and Busybox)\n* `curl`\n* `openssl` (≥ 1.1.1 if you use subject alternative names)\n\n\n== Installation\n\nNOTE: The project’s link:Makefile[] supports standard GNU variables such as `DESTDIR`, `prefix`, `bindir`…\n\n\n=== On Alpine Linux\n\n[source, sh, subs=\"verbatim, attributes\"]\napk add {name}\nln -s /usr/bin/cesnet-tcs-fetch-issued /etc/periodic/hourly/\nln -s /usr/bin/cesnet-tcs-renew /etc/periodic/daily/\n\n\n=== From git\n\n[source, sh, subs=\"verbatim, attributes\"]\n----\ngit clone -b v{version} https://github.com/{gh-name}.git\ncd {name}\nmake install\nmake install-cron\n----\n\n\n=== From Tarball\n\n[source, sh, subs=\"verbatim, attributes\"]\n----\nwget https://github.com/{gh-name}/archive/v{version}/{name}-{version}.tar.gz\ntar -xzf {name}-{version}.tar.gz\ncd {name}-{version}\nmake install\nmake install-cron\n----\n\n\n== Usage\n\nSee `--help` of link:cesnet-tcs#L3[cesnet-tcs], link:cesnet-tcs-fetch-issued#L3[cesnet-tcs-fetch-issued], link:cesnet-tcs-renew#L3[cesnet-tcs-renew] and comments in link:cesnet-tcs.conf[].\n\n.*Typical workflow in a nutshell:*\n. Request a new certificate using `cesnet-tcs req my.example.org`\n. Once the request is approved and the certificate issued, the `cesnet-tcs-fetch-issued` cron script will automatically fetch it and store in `/etc/ssl/cesnet`.\n. Two weeks before the certificate’s expiration date the `cesnet-tcs-renew` cron script will automatically request a new one. _goto 2_\n\n\n== Files and Directories\n\nlink:cesnet-tcs[/usr/bin/cesnet-tcs]::\n  Requests a certificate or fetches the issued certificate from CESNET TCS.\n\nlink:cesnet-tcs-fetch-issued[/usr/bin/cesnet-tcs-fetch-issued] (\u003c– /etc/periodic/hourly/cesnet-tcs-fetch-issued)::\n  Checks pending certificate requests in `$spool_dir` footnote:[`cesnet-tcs req` writes theres file for each requested certificate.] and fetches all that are already issued.\n  Afterwards runs `$post_fetch_script` with domain names of the fetched certificates as arguments, if there are some.\n  This script is supposed to be run periodically by cron.\n\nlink:cesnet-tcs-renew[/usr/bin/cesnet-tcs-renew] (\u003c– /etc/periodic/daily/cesnet-tcs-renew)::\n  Checks all certificates in `$certs_dir` and for each that is _N_ days to expire (_N_ is specified by `$renew_days_before`) sends a new certificate request to CESNET TCS.\n  This script is supposed to be run periodically by cron.\n\nlink:cesnet-tcs.conf[/etc/cesnet-tcs/cesnet-tcs.conf]::\n  Configuration file in shell syntax for all the above scripts.\n\nlink:post-fetch.sh[/etc/cesnet-tcs/post-fetch.sh]::\n  A hook script that is executed by `cesnet-tcs-fetch-issued` after it fetches some new certificate(s).\n\n/etc/ssl/cesnet::\n  Directory where certificates and keys are stored.\n  The location can be changed by `$certs_dir` and `$keys_dir` config variables.\n\n/var/spool/cesnet-tcs::\n  Directory where IDs of the sent certificate requests are stored.\n  The location can be changed by `$spool_dir` config variable.\n\n\nNOTE: All paths correspond to installation with `prefix=/usr`.\n\n\n== License\n\nThis project is licensed under http://opensource.org/licenses/MIT[MIT License].\nFor the full text of the license, see the link:LICENSE[LICENSE] file.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjirutka%2Fcesnet-tcs-cli","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjirutka%2Fcesnet-tcs-cli","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjirutka%2Fcesnet-tcs-cli/lists"}