https://github.com/nmeum/acme-mock
An ACME server implementation performing no validations
https://github.com/nmeum/acme-mock
acme acme-protocol
Last synced: 2 days ago
JSON representation
An ACME server implementation performing no validations
- Host: GitHub
- URL: https://github.com/nmeum/acme-mock
- Owner: nmeum
- License: agpl-3.0
- Created: 2019-09-15T11:10:04.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2024-12-30T22:40:48.000Z (over 1 year ago)
- Last Synced: 2025-10-19T08:43:36.629Z (9 months ago)
- Topics: acme, acme-protocol
- Language: Go
- Homepage:
- Size: 37.1 KB
- Stars: 3
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# acme-mock
An [ACME][RFC 8555] server implementation performing no validations.
## Motivation
I make heavy use of ACME in [ansible][ansible homepage] playbooks.
Occasionally, I test these playbooks in virtual machines. Unfortunately,
these virtual machines are incapable of completing ACME challenges and
therefore don't receive any certificates from configured ACME servers.
Without these certificates many daemons will refuse to start causing
failures of ansible tasks. For this reason, I implemented a simple ACME
server which doesn't perform any validations and always signs the given
certificate signing requests.
## Status
Horrible hack, didn't read the RFC and only implemented the parts needed
to make [acme-tiny][acme-tiny github] work.
## Usage
This software has no external dependencies and can be installed using:
$ go get github.com/nmeum/acme-mock
Since ACME requires HTTPS, a TLS certificate is needed. A bogus
certificate can be generated with `openssl`:
$ yes "" | openssl req -x509 -nodes -newkey rsa:4096 \
-keyout key.pem -out cert.pem
The generated TLS certificate and key need to be passed to `acme-mock`.
Additionally, the certificate needs to be added to the certificate store
of the virtual machine. Afterwards, the ACME client needs to be
configured to use the `acme-mock` directory. The URL of the directory
resource depends on the address parameter, it defaults to
`https://localhost/directory`. The certificate, used for processing
certificate signing requests, is generated on startup.
### Certbot
Certbot can be used against this ACME mock to retrieve mock certificates.
```
certbot certonly --standalone -d --server https://localhost/directory --register-unsafely-without-email
```
## License
This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or (at
your option) any later version.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero
General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see .
[RFC 8555]: https://tools.ietf.org/html/rfc8555
[ansible homepage]: https://ansible.com/
[acme-tiny github]: https://github.com/diafygi/acme-tiny