change command line options:
n -> A new Account key
N -> D new Domain key
With this acme-client has these main usage patterns:
* create new Account Key and Domain Key and get a certificate:
acme-client -A -D www.example.com
* renew certificate:
acme-client www.example.com
* revoke certificate:
acme-client -r www.example.com
diff --git usr.sbin/acme-client/acme-client.1 usr.sbin/acme-client/acme-client.1
index 8933408..db17814 100644
--- usr.sbin/acme-client/acme-client.1
+++ usr.sbin/acme-client/acme-client.1
@@ -52,9 +52,9 @@ If there are no certificates in place, this option does
nothing.
Force updating the certificate signature even if it's too soon.
.It Fl f Ar configfile
Specify an alternative configuration file.
-.It Fl N
+.It Fl D
Create a new RSA domain key if one does not already exist.
-.It Fl n
+.It Fl A
Create a new RSA account key if one does not already exist.
.It Fl r
Revoke the X509 certificate found in the certificates.
diff --git usr.sbin/acme-client/main.c usr.sbin/acme-client/main.c
index b12e036..21abe4a 100644
--- usr.sbin/acme-client/main.c
+++ usr.sbin/acme-client/main.c
@@ -66,10 +66,10 @@ main(int argc, char *argv[])
case 'F':
force = 1;
break;
- case 'n':
+ case 'A':
popts |= ACME_OPT_NEWACCT;
break;
- case 'N':
+ case 'D':
popts |= ACME_OPT_NEWDKEY;
break;
case 'r':
@@ -399,6 +399,6 @@ main(int argc, char *argv[])
(2 == c ? EXIT_SUCCESS : 2));
usage:
fprintf(stderr,
- "usage: acme-client [-bFnNrv] [-f file] domain\n");
+ "usage: acme-client [-bFADrv] [-f file] domain\n");
return (EXIT_FAILURE);
}