acme

import os from cryptography.hazmat.primitives.asymmetric import rsa from cryptography.hazmat.backends import default_backend from acme import client from acme import messages import josepy as jose # This is the staging ACME URL for Let's Encrypt DIRECTORY_URL = os.environ.get('ACME_DIRECTORY_URL', 'https://acme-staging-v02.api.letsencrypt.org/directory') def run_acme_client(): # 1. Create a new ACME account private key acc_key_pem = rsa.generate_private_key( public_exponent=65537, key_size=2048, backend=default_backend() ) acc_key = jose.JWK.from_pem(acc_key_pem.private_bytes( encoding=jose.serialization.Encoding.PEM, format=jose.serialization.PrivateFormat.PKCS8, encryption_algorithm=jose.serialization.NoEncryption() )) # 2. Initialize the client network net = client.ClientNetwork(acc_key, user_agent="my-acme-client/1.0") # 3. Get the ACME directory object directory = messages.Directory.from_json(net.get(DIRECTORY_URL).json()) # 4. Create the ACME client acme_client = client.ClientV2(directory, net=net) # 5. Register a new account (or load existing) # email_contact is optional for staging/testing new_reg = messages.NewRegistration( terms_of_service_agreed=True, contact=('mailto:test@example.com',) if 'test@example.com' in os.environ.get('ACME_EMAIL', '') else None ) try: regr = acme_client.new_account(new_reg) print(f"Account created/loaded: {regr.uri}") except client.errors.ConflictError as e: # Account already exists, retrieve it print(f"Account already exists, retrieving: {e.uri}") regr = acme_client.query_registration(messages.RegistrationResource(uri=e.uri, body=new_reg)) print("ACME client initialized and account registered.") return acme_client, regr if __name__ == "__main__": acme_client_instance, account_resource = run_acme_client()