Comments (3)
Hi!
It's true that I was hoping for more ACME providers. 😉 But the service loader is an integral part of Java Modules, so I don't see a good reason why it should not be used.
As a compromise, would it help you if the Let's Encrypt provider gets hardwired into acme4j (so it won't be loaded via service loader), but I keep the service loader mechanism as an option for other providers?
from acme4j.
Let me think about an acme4j OSGi maven module add on, using the Spi Fly OSGi service loader bridge.
from acme4j.
I have created a non invasive solution with the Aries SPI FLY dynamic service loading mechanism.
Install Aries SPI FLY, or other OSGi Java service provider bridge, and create a bundle fragment to extend the headers on the acme4j-client like this to let SPI FLY register the providers:
<dependencies>
<dependency>
<groupId>org.shredzone.acme4j</groupId>
<artifactId>acme4j-client</artifactId>
<version>${shredzone.acme4j.version}</version>
<scope>provided</scope>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.apache.felix</groupId>
<artifactId>maven-bundle-plugin</artifactId>
<configuration>
<instructions>
<Fragment-Host>acme4j-client</Fragment-Host>
<Require-Capability>
osgi.extender;
filter:="(osgi.extender=osgi.serviceloader.registrar)"
</Require-Capability>
<Provide-Capability>
osgi.serviceloader;
uses:="org.shredzone.acme4j.provider";
osgi.serviceloader=org.shredzone.acme4j.provider.AcmeProvider
</Provide-Capability>
</instructions>
</configuration>
</plugin>
</plugins>
</build>
On the bundle creating the session, being the consumer of the above providers, declare the following:
<dependencies>
<dependency>
<groupId>org.shredzone.acme4j</groupId>
<artifactId>acme4j-client</artifactId>
<version>${shredzone.acme4j.version}</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.quartz-scheduler</groupId>
<artifactId>quartz</artifactId>
<version>${quartz.scheduler.version}</version>
<scope>provided</scope>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.apache.felix</groupId>
<artifactId>maven-bundle-plugin</artifactId>
<configuration>
<instructions>
<Require-Capability>
osgi.serviceloader;
filter:="(osgi.serviceloader=org.shredzone.acme4j.provider.AcmeProvider)";
cardinality:=multiple,
osgi.extender;
filter:="(osgi.extender=osgi.serviceloader.processor)"
</Require-Capability>
</instructions>
</configuration>
</plugin>
</plugins>
</build>
As you can see this is a api bundle containing my Quartz cron jobs.
Create the acme4j Session like below (see in the Session.class), because Quartz cannot access the Service Provider within the job running on an internal thread, that would need a ClassLoadingHelper and even more fiddling:
Iterable providers = ServiceLoader.load(AcmeProvider.class);
AcmeProvider provider = StreamSupport.stream(providers.spliterator(), false)
.filter(p -> p.accepts(serverUri))
.reduce((a, b) -> {
throw new IllegalArgumentException("Both ACME providers "
+ a.getClass().getSimpleName() + " and "
+ b.getClass().getSimpleName() + " accept "
+ serverUri + ". Please check your classpath.");
})
.orElseThrow(() -> new IllegalArgumentException("No ACME provider found for " + serverUri));
LOGGER.info("Triggering Let's Encrypt request certificate job from URL {}", serverUri);
try {
Session session = new Session(serverUri, provider);
session.setLocale(Locale.UK);
Metadata meta = session.getMetadata();
URI termsOfService = meta.getTermsOfService();
URL website = meta.getWebsite();
LOGGER.info("ACME account URL {}", website);
from acme4j.
Related Issues (20)
- Getting urn:ietf:params:acme:error:unauthorized in http-01 challenge HOT 2
- Intermediate certificate required. Unable to get issuer certificate. HOT 6
- RFC8823: acme4j response does not match CA expectation HOT 8
- [Feature request / acme4j-smime] Add support for S/MIME validation HOT 16
- Create order failing with AcmeServerException without any exception message HOT 2
- Getting Unable to get local issuer certificate HOT 3
- Android: order is valid however certificate chain is not correctly downloaded HOT 19
- Allow to set a complete X500Name to CSRBuilder in addition to the single set-methods HOT 5
- [Feature request / acme4j] Allow to access delegations HOT 1
- Did you find any provider for RFC8823 support / email-reply-00 challenges? HOT 4
- The challenge status is always "INVALID" HOT 5
- The challenge status was always "INVALID" HOT 13
- http://${domain}/.well-known/acme-challenge/${token}
- acme4j example is creating zero- length crt files HOT 10
- preferred-chain attribute, for alternate chains HOT 2
- Can only parse traditional files HOT 2
- Unable to update account message HOT 6
- [Question] How to generate .pfx or .p12 (KeyStore) file? HOT 7
- Recovery from - Too many certificates already issued for exact set of domains HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from acme4j.