[andy/dehydrated.git] / docs / per-certificate-config.md

# Config on per-certificate base

dehydrated allows a few configuration variables to be set on a per-certificate base.

To use this feature create a `config` file in the certificates output directory (e.g. `certs/example.org/config`).

Currently supported options:

- PRIVATE_KEY_RENEW
- KEY_ALGO
- KEYSIZE
- OCSP_MUST_STAPLE
- CHALLENGETYPE
- HOOK
- HOOK_CHAIN
- WELLKNOWN
- OPENSSL_CNF
- RENEW_DAYS
- ALT_NAMES
Commit	Line	Data
ec489069 LS	1	# Config on per-certificate base
ec489069 LS	2
ec49a443	3	dehydrated allows a few configuration variables to be set on a per-certificate base.
ec489069 LS	4
	5	To use this feature create a `config` file in the certificates output directory (e.g. `certs/example.org/config`).
	6
	7	Currently supported options:
	8
	9	- PRIVATE_KEY_RENEW
	10	- KEY_ALGO
	11	- KEYSIZE
	12	- OCSP_MUST_STAPLE
	13	- CHALLENGETYPE
	14	- HOOK
	15	- HOOK_CHAIN
	16	- WELLKNOWN
	17	- OPENSSL_CNF
	18	- RENEW_DAYS
4d3f3fff	19	- ALT_NAMES