View source for Installing ACME Responder in PKI CA

= Installing PKI CA =

See [[Installing CA]].

= Creating ACME Responder =

To create ACME responder:

<pre>
$ pki-server acme-create
</pre>

It will store the initial configuration files in /etc/pki/<font color="red">pki-tomcat</font>/acme folder.

To customize the configuration, see [[Configuring PKI ACME Responder]].

= Deploying ACME Responder =

To deploy ACME responder:

<pre>
$ pki-server acme-deploy
</pre>

It will create a deployment descriptor at /etc/pki/<font color="red">pki-tomcat</font>/Catalina/localhost/acme.xml.

The ACME responder should start automatically in a few seconds. It is not necessary to restart PKI server.

To verify, retrieve the ACME responder's metadata with the following command:

<pre>
# curl -s -k https://$HOSTNAME:8443/acme/directory | python -m json.tool
{
    "meta": {
        "caaIdentities": [
            "dogtagpki.org"
        ],
        "externalAccountRequired": false,
        "termsOfService": "https://www.dogtagpki.org/wiki/PKI_ACME_Responder",
        "website": "https://www.dogtagpki.org"
    },
    "newAccount": "https://localhost.localdomain:8443/acme/new-account",
    "newNonce": "https://localhost.localdomain:8443/acme/new-nonce",
    "newOrder": "https://localhost.localdomain:8443/acme/new-order"
}
</pre>

= Undeploying ACME Responder =

To undeploy ACME responder:

<pre>
$ pki-server acme-undeploy
</pre>

= Removing ACME Responder =

To remove ACME responder:

<pre>
$ pki-server acme-remove
</pre>

= See Also =

* [[PKI ACME Responder]]