Support for ACME CA server module

[Rudedog9d]

Add a module for letsencrypt/Pebble and/or letsencrypt/Boulder ACME servers, allowing any application using certbot within the environment to get a valid certificate.

[Rudedog9d]

It actually looks like step-ca might be a little better suited for the lab environment

• https://github.com/smallstep/certificates

• https://smallstep.com/blog/private-acme-server/

[Rudedog9d]

Basic set up steps for step-ca:

# download latest stable releases
wget https://github.com/smallstep/cli/releases/download/v0.15.2/step-cli_0.15.2_amd64.deb
wget https://github.com/smallstep/certificates/releases/download/v0.15.2/step-certificates_0.15.2_amd64.deb

# Install packages
dpkg -i step-certificates_*_amd64.deb  step-cli_*_amd64.deb

# Follow prompts to set up CA
# We should be able to use the certs from MiniCA if you place them in .step/certs/ and set the config in .step/config/ca
step ca init --name "Fakernet Development CA" --dns 192.168.10.207,ca.slothnet.bdavis.me --address :443 --provisioner prov01 --password-file step.password

# Add acme to CA
step ca provisioner add acme --type ACME

# run the CA server
step-ca --password-file step.password --resolver 192.168.0.5:53 .step/config/ca.json

Then on the client:

certbot --nginx --server https://192.168.10.207/acme/acme/directory --no-verify-ssl