When acme.sh is run as a non-root user different from the owner of the
webroot directory it is unable to change the owner of the files in
.well-known to that user, causing permissions errors. Avoid this by
making the files world-readable.
These files should pose no disclosure risk since they are sent in
cleartext during the HTTP Identifier Validation Challenge[1] and may
already be exposed by directory enumeration, depending on server
settings. AFAIK they should be safe to expose as world-readable in all
cases.
1. https://ietf-wg-acme.github.io/acme/#rfc.section.7.2FixesNeilpang/acme.sh#32
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
Description "Based on the omg.lol API" is useless for users so removed.
The link to api moved to comment bellow.
Domains: omg.lol is unnecessary because the DNS provider name is anyway omg.lol.
Site: changed to point to the https://omg.lol site.
Issues: put a link to the support issue.
Remove the useless "Please Read this guide first" comment.
Fix typos.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
the same pagination bug that happens for accounts with a large number of
domains also happens for DNS zones with a large number of records. The
previous code assumes that all records are returned in a single page.
Changed the code to do an exact match search so that it returns only the few
required records and never paginates replies.