Skip to main content
An installation that was sold carries a signed key. It is checked offline: Lekalao never needs the internet to know it is licensed.

​
Activate a key

.env
The command checks the signature and saves the key. A key badly copied, or signed by someone else, is refused.

​
What the key says

​
The online check

Every Tuesday, lekalao:licence:check tells the licence server that the installation is running, and asks whether the key has been revoked. It sends the key, an installation identifier derived from APP_KEY (which says nothing about the customer), the domain and the version.
  • Server unreachable: nothing changes, the key proves itself.
  • Key revoked: the command says so and exits with an error.

​
When it runs out

When the update period ends, Lekalao keeps sending. Only new versions and support stop. Renew to get them back.

​
On the seller’s side

To sell installations, a Lekalao server acts as the licence server.
1

Generate the key pair, once

Keep the signing key secret (LEKALAO_LICENCE_SIGNING_KEY); ship the public key with your versions.
2

Issue a key

From Platform → Licences → Issue a licence, or:
The key is shown once only. Send it to the customer.
3

Follow and revoke

Platform → Licences lists the keys, their active installations and their end date, and lets you Revoke one.