It's a nosudo script then why "sudo python..." ? about acme-nosudo HOT 2 CLOSED

It's a nosudo script then why "sudo python..."

To bind to the port 80.

Let's Encrypt need to validate your request, as long as you can serve the challenge it will be happy.

A workaround without sudo could be something in the lines of:

python -c "import BaseHTTPServer; \
h = BaseHTTPServer.BaseHTTPRequestHandler; \
h.do_GET = lambda r: r.send_response(200) or r.end_headers() or r.wfile.write('XYZ...'); \
s = BaseHTTPServer.HTTPServer(('0.0.0.0', 65080), h); \
s.serve_forever()"

Then in your HTTPD a rul to proxy requests to http://yourdomain/.well-known/acme-challenge/.* to localhost:65080.

If you don't have a shell access on the host, or whatever reason, the best way is to use the --file-based parameter:

python sign_csr.py --file-based --public-key user.pub domain.csr > signed.crt

It will tell you the path and the content of the file to put on your webserver.

from acme-nosudo.

Thank you so much.

from acme-nosudo.