Skip to content

Installation

Debian & Ubuntu

The simplest way is to add the KIT-CA Repository. The repository is available for bullseye, buster (Debian), focal and jammy (Ubuntu)

Add the KIT-CA Repo

repository signing key path changed

Early versions of this documentation named the repository signing key ca-repo.gpg instead of kit-ca-repo.asc. Make sure to fix the Signed-By: line in your old configuration if neccessary.

Manual repository setup

  • Install the basic packages: 
    apt-get install -y apt-transport-https curl gpg wget
  • Download the KIT-CA GPG Key: 
    wget https://repo.ca.kit.edu/keys/repo_at_ca_kit_edu \
 -O /usr/share/keyrings/kit-ca-repo.asc
  • Add the sources file /etc/apt/sources.list.d/kit-ca-repo.sources (change bookworm to your distribution): 
    cat > /etc/apt/sources.list.d/kit-ca-repo.sources <<'EOF'
Enabled: yes
X-Repolib-Name: ca-repo
Types: deb
Components: main
Suites: bookworm
URIs: https://repo.ca.kit.edu/
Signed-By: /usr/share/keyrings/kit-ca-repo.asc
EOF
  • Update package database: 
    apt-get update
  • Important: Install the package kit-ca-repo-key: 
    apt-get install -y kit-ca-repo-key

Repository setup via package

  • Go to https://repo.ca.kit.edu/pool/main/k/kit-ca-repo/ and get the correct link for the package kit-ca-repo-apt-source
  • Download and install the package (be sure to replace the placeholder in the commands with the filename from the previous step): 
    wget https://repo.ca.kit.edu/pool/main/k/kit-ca-repo/<filename>
apt install ./<filename>

Install acme4netvs + ACME client

  • apt-get install -y acme4netvs dehydrated or
  • apt-get install -y acme4netvs certbot

Everything else

Manual updates required

If you install acme4netvs manually, you will not get any automatic updates. This may silently break if your installed version is not supported anymore by the current NETVS API version. Please either check back here regularly or subscribe to the release RSS feed, found in the upper right corner () of the releases page (no link here because they contain an individual access token that is tied to your Gitlab account).

You can download the most recent version of acme4netvs for your respective plattform via permalinks to our GitLab releases:

dehydrated certbot win-acme
🐧 Linux x64 🐧 Linux x64 ❌
🐧 Linux ARM64v7 🐧 Linux ARM64v7 ❌
🐧 Linux ARM64v6 🐧 Linux ARM64v6 ❌
🐧 Linux ARMv7 🐧 Linux ARMv7 ❌
🐧 Linux ARMv6 🐧 Linux ARMv6 ❌
😈 FreeBSD x64 😈 FreeBSD x64 ❌
🍎 MacOS All 🍎 MacOS All ❌
🍎 MacOS x64 🍎 MacOS x64 ❌
🍎 MacOS ARM64 🍎 MacOS ARM64 ❌
🪟 Windows x64 🪟 Windows x64 🪟 Windows x64