To install click the Add extension button. That's it.

The source code for the WIKI 2 extension is being checked by specialists of the Mozilla Foundation, Google, and Apple. You could also do it yourself at any point in time.

How to transfigure the Wikipedia

Would you like Wikipedia to always look as professional and up-to-date? We have created a browser extension. It will enhance any encyclopedic page you visit with the magic of the WIKI 2 technology.

Try it — you can delete it anytime.

Install in 5 seconds
4,5
Kelly Slayton
Congratulations on this excellent venture… what a great idea!
Alexander Grigorievskiy
I use WIKI 2 every day and almost forgot how the original Wikipedia looks like.
Live Statistics
English Articles
Improved in 24 Hours
Added in 24 Hours
What we do. Every page goes through several hundred of perfecting techniques; in live mode. Quite the same Wikipedia. Just better.
Great Wikipedia has got greater.
.
Leo
Newton
Brights
Milds

Automatic Certificate Management Environment

From Wikipedia, the free encyclopedia

ACME logo

The Automatic Certificate Management Environment (ACME) protocol is a communications protocol for automating interactions between certificate authorities and their users' servers, allowing the automated deployment of public key infrastructure at very low cost.[1][2] It was designed by the Internet Security Research Group (ISRG) for their Let's Encrypt service.[1]

The protocol, based on passing JSON-formatted messages over HTTPS,[2][3] has been published as an Internet Standard in RFC 8555[4] by its own chartered IETF working group.[5]

Client implementations

The ISRG provides free and open-source reference implementations for ACME: certbot is a Python-based implementation of server certificate management software using the ACME protocol,[6][7][8] and boulder is a certificate authority implementation, written in Go.[9]

Since 2015 a large variety of client options have appeared for all operating systems.[10]

API versions

API version 1

API v1 specification was published on April 12, 2016. It supports issuing certificates for fully-qualified domain names, such as example.com or cluster.example.com, but not wildcards like *.example.com. Let's Encrypt turned off API v1 support on 1 June 2021.[11]

API version 2

API v2 was released March 13, 2018 after being pushed back several times. ACME v2 is not backwards compatible with v1. Version 2 supports wildcard domains, such as *.example.com, allowing for many subdomains to have trusted TLS, e.g. https://cluster01.example.com, https://cluster02.example.com, https://example.com, on private networks under a single domain using a single shared "wildcard" certificate.[12] A major new requirement in v2 is that requests for wildcard certificates require the modification of a Domain Name Service TXT record, verifying control over the domain.

Changes to ACME v2 protocol since v1 include:[13]

  1. The authorization/issuance flow has changed.
  2. JWS request authorization has changed.
  3. The "resource" field of JWS request bodies is replaced by a new JWS header: "url".
  4. Directory endpoint/resource renaming.
  5. URI → URL renaming in challenge resources.
  6. Account creation and ToS agreement are combined into one step. Previously, these were two steps.
  7. A new challenge type was implemented, TLS-ALPN-01. Two earlier challenge types, TLS-SNI-01 and TLS-SNI-02, were removed because of security issues.[14][15]

See also

References

  1. ^ a b Steven J. Vaughan-Nichols (9 April 2015). "Securing the web once and for all: The Let's Encrypt Project". ZDNet.
  2. ^ a b "ietf-wg-acme/acme-spec". GitHub. Retrieved 2017-04-05.
  3. ^ Chris Brook (18 November 2014). "EFF, Others Plan to Make Encrypting the Web Easier in 2015". ThreatPost.
  4. ^ Barnes, R.; Hoffman-Andrews, J.; McCarney, D.; Kasten, J. (2019-03-12). Automatic Certificate Management Environment (ACME). IETF. doi:10.17487/RFC8555. RFC 8555. Retrieved 2019-03-13.
  5. ^ "Automated Certificate Management Environment (acme)". IETF Datatracker. Retrieved 2019-03-12.
  6. ^ "Certbot". EFF. Retrieved 2016-08-14.
  7. ^ "certbot/certbot". GitHub. Retrieved 2016-06-02.
  8. ^ "Announcing Certbot: EFF's Client for Let's Encrypt". LWN. 2016-05-13. Retrieved 2016-06-02.
  9. ^ "letsencrypt/boulder". GitHub. Retrieved 2015-06-22.
  10. ^ "ACME Client Implementations - Let's Encrypt - Free SSL/TLS Certificates". letsencrypt.org.
  11. ^ "End of Life Plan for ACMEv1 - API Announcements". Let's Encrypt Community Support. 2021-05-05. Retrieved 2021-06-12.
  12. ^ "ACME v2 API Endpoint Coming January 2018 - Let's Encrypt - Free SSL/TLS Certificates". letsencrypt.org.
  13. ^ "Staging endpoint for ACME v2". Let's Encrypt Community Support. January 5, 2018.
  14. ^ "Challenge Types - Let's Encrypt Documentation". Let's Encrypt. 2020-12-08. Retrieved 2021-05-12.
  15. ^ Barnes, R.; Hoffman-Andrews, J.; McCarney, D.; Kasten, J. (2019-03-12). Automatic Certificate Management Environment (ACME). IETF. doi:10.17487/RFC8555. RFC 8555. Retrieved 2021-05-12. The values "tls-sni-01" and "tls-sni-02" are reserved because they were used in pre-RFC versions of this specification to denote validation methods that were removed because they were found not to be secure in some cases.

External links

This page was last edited on 8 February 2024, at 16:28
Basis of this page is in Wikipedia. Text is available under the CC BY-SA 3.0 Unported License. Non-text media are available under their specified licenses. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc. WIKI 2 is an independent company and has no affiliation with Wikimedia Foundation.
Contact WIKI 2
Introduction
Terms of Service
Privacy Policy