Mercurial Hosting > luan
annotate host/acme.sh @ 2023:544ccce564f6 default tip
minor
| author | Franklin Schmidt <fschmidt@gmail.com> |
|---|---|
| date | Mon, 20 Oct 2025 17:34:14 -0600 |
| parents | 61b0cc7db09c |
| children |
| rev | line source |
|---|---|
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1 #!/bin/bash |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3 VER=3.1.2 |
| 1630 | 4 |
| 5 PROJECT_NAME="acme.sh" | |
| 6 | |
| 7 PROJECT_ENTRY="acme.sh" | |
| 8 | |
| 9 PROJECT="https://github.com/acmesh-official/$PROJECT_NAME" | |
| 10 | |
| 11 DEFAULT_INSTALL_HOME="$HOME/.$PROJECT_NAME" | |
| 12 | |
| 13 _WINDOWS_SCHEDULER_NAME="$PROJECT_NAME.cron" | |
| 14 | |
| 15 _SCRIPT_="$0" | |
| 16 | |
| 17 _SUB_FOLDER_NOTIFY="notify" | |
| 18 _SUB_FOLDER_DNSAPI="dnsapi" | |
| 19 _SUB_FOLDER_DEPLOY="deploy" | |
| 20 | |
| 21 _SUB_FOLDERS="$_SUB_FOLDER_DNSAPI $_SUB_FOLDER_DEPLOY $_SUB_FOLDER_NOTIFY" | |
| 22 | |
| 23 CA_LETSENCRYPT_V2="https://acme-v02.api.letsencrypt.org/directory" | |
| 24 CA_LETSENCRYPT_V2_TEST="https://acme-staging-v02.api.letsencrypt.org/directory" | |
| 25 | |
| 26 CA_ZEROSSL="https://acme.zerossl.com/v2/DV90" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
27 _ZERO_EAB_ENDPOINT="https://api.zerossl.com/acme/eab-credentials-email" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
28 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
29 CA_SSLCOM_RSA="https://acme.ssl.com/sslcom-dv-rsa" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
30 CA_SSLCOM_ECC="https://acme.ssl.com/sslcom-dv-ecc" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
31 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
32 CA_GOOGLE="https://dv.acme-v02.api.pki.goog/directory" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
33 CA_GOOGLE_TEST="https://dv.acme-v02.test-api.pki.goog/directory" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
34 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
35 DEFAULT_CA=$CA_ZEROSSL |
| 1630 | 36 DEFAULT_STAGING_CA=$CA_LETSENCRYPT_V2_TEST |
| 37 | |
| 38 CA_NAMES=" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
39 ZeroSSL.com,zerossl |
| 1630 | 40 LetsEncrypt.org,letsencrypt |
| 41 LetsEncrypt.org_test,letsencrypt_test,letsencrypttest | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
42 SSL.com,sslcom |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
43 Google.com,google |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
44 Google.com_test,googletest,google_test |
| 1630 | 45 " |
| 46 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
47 CA_SERVERS="$CA_ZEROSSL,$CA_LETSENCRYPT_V2,$CA_LETSENCRYPT_V2_TEST,$CA_SSLCOM_RSA,$CA_GOOGLE,$CA_GOOGLE_TEST" |
| 1630 | 48 |
| 49 DEFAULT_USER_AGENT="$PROJECT_NAME/$VER ($PROJECT)" | |
| 50 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
51 DEFAULT_ACCOUNT_KEY_LENGTH=ec-256 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
52 DEFAULT_DOMAIN_KEY_LENGTH=ec-256 |
| 1630 | 53 |
| 54 DEFAULT_OPENSSL_BIN="openssl" | |
| 55 | |
| 56 VTYPE_HTTP="http-01" | |
| 57 VTYPE_DNS="dns-01" | |
| 58 VTYPE_ALPN="tls-alpn-01" | |
| 59 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
60 ID_TYPE_DNS="dns" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
61 ID_TYPE_IP="ip" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
62 |
| 1630 | 63 LOCAL_ANY_ADDRESS="0.0.0.0" |
| 64 | |
| 65 DEFAULT_RENEW=60 | |
| 66 | |
| 67 NO_VALUE="no" | |
| 68 | |
| 69 W_DNS="dns" | |
| 70 W_ALPN="alpn" | |
| 71 DNS_ALIAS_PREFIX="=" | |
| 72 | |
| 73 MODE_STATELESS="stateless" | |
| 74 | |
| 75 STATE_VERIFIED="verified_ok" | |
| 76 | |
| 77 NGINX="nginx:" | |
| 78 NGINX_START="#ACME_NGINX_START" | |
| 79 NGINX_END="#ACME_NGINX_END" | |
| 80 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
81 BEGIN_CSR="-----BEGIN [NEW ]\{0,4\}CERTIFICATE REQUEST-----" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
82 END_CSR="-----END [NEW ]\{0,4\}CERTIFICATE REQUEST-----" |
| 1630 | 83 |
| 84 BEGIN_CERT="-----BEGIN CERTIFICATE-----" | |
| 85 END_CERT="-----END CERTIFICATE-----" | |
| 86 | |
| 87 CONTENT_TYPE_JSON="application/jose+json" | |
| 88 RENEW_SKIP=2 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
89 CODE_DNS_MANUAL=3 |
| 1630 | 90 |
| 91 B64CONF_START="__ACME_BASE64__START_" | |
| 92 B64CONF_END="__ACME_BASE64__END_" | |
| 93 | |
| 94 ECC_SEP="_" | |
| 95 ECC_SUFFIX="${ECC_SEP}ecc" | |
| 96 | |
| 97 LOG_LEVEL_1=1 | |
| 98 LOG_LEVEL_2=2 | |
| 99 LOG_LEVEL_3=3 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
100 DEFAULT_LOG_LEVEL="$LOG_LEVEL_2" |
| 1630 | 101 |
| 102 DEBUG_LEVEL_1=1 | |
| 103 DEBUG_LEVEL_2=2 | |
| 104 DEBUG_LEVEL_3=3 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
105 DEBUG_LEVEL_DEFAULT=$DEBUG_LEVEL_2 |
| 1630 | 106 DEBUG_LEVEL_NONE=0 |
| 107 | |
| 108 DOH_CLOUDFLARE=1 | |
| 109 DOH_GOOGLE=2 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
110 DOH_ALI=3 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
111 DOH_DP=4 |
| 1630 | 112 |
| 113 HIDDEN_VALUE="[hidden](please add '--output-insecure' to see this value)" | |
| 114 | |
| 115 SYSLOG_ERROR="user.error" | |
| 116 SYSLOG_INFO="user.info" | |
| 117 SYSLOG_DEBUG="user.debug" | |
| 118 | |
| 119 #error | |
| 120 SYSLOG_LEVEL_ERROR=3 | |
| 121 #info | |
| 122 SYSLOG_LEVEL_INFO=6 | |
| 123 #debug | |
| 124 SYSLOG_LEVEL_DEBUG=7 | |
| 125 #debug2 | |
| 126 SYSLOG_LEVEL_DEBUG_2=8 | |
| 127 #debug3 | |
| 128 SYSLOG_LEVEL_DEBUG_3=9 | |
| 129 | |
| 130 SYSLOG_LEVEL_DEFAULT=$SYSLOG_LEVEL_ERROR | |
| 131 #none | |
| 132 SYSLOG_LEVEL_NONE=0 | |
| 133 | |
| 134 NOTIFY_LEVEL_DISABLE=0 | |
| 135 NOTIFY_LEVEL_ERROR=1 | |
| 136 NOTIFY_LEVEL_RENEW=2 | |
| 137 NOTIFY_LEVEL_SKIP=3 | |
| 138 | |
| 139 NOTIFY_LEVEL_DEFAULT=$NOTIFY_LEVEL_RENEW | |
| 140 | |
| 141 NOTIFY_MODE_BULK=0 | |
| 142 NOTIFY_MODE_CERT=1 | |
| 143 | |
| 144 NOTIFY_MODE_DEFAULT=$NOTIFY_MODE_BULK | |
| 145 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
146 _BASE64_ENCODED_CFGS="Le_PreHook Le_PostHook Le_RenewHook Le_Preferred_Chain Le_ReloadCmd" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
147 |
| 1630 | 148 _DEBUG_WIKI="https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh" |
| 149 | |
| 150 _PREPARE_LINK="https://github.com/acmesh-official/acme.sh/wiki/Install-preparations" | |
| 151 | |
| 152 _STATELESS_WIKI="https://github.com/acmesh-official/acme.sh/wiki/Stateless-Mode" | |
| 153 | |
| 154 _DNS_ALIAS_WIKI="https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mode" | |
| 155 | |
| 156 _DNS_MANUAL_WIKI="https://github.com/acmesh-official/acme.sh/wiki/dns-manual-mode" | |
| 157 | |
| 158 _DNS_API_WIKI="https://github.com/acmesh-official/acme.sh/wiki/dnsapi" | |
| 159 | |
| 160 _NOTIFY_WIKI="https://github.com/acmesh-official/acme.sh/wiki/notify" | |
| 161 | |
| 162 _SUDO_WIKI="https://github.com/acmesh-official/acme.sh/wiki/sudo" | |
| 163 | |
| 164 _REVOKE_WIKI="https://github.com/acmesh-official/acme.sh/wiki/revokecert" | |
| 165 | |
| 166 _ZEROSSL_WIKI="https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA" | |
| 167 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
168 _SSLCOM_WIKI="https://github.com/acmesh-official/acme.sh/wiki/SSL.com-CA" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
169 |
| 1630 | 170 _SERVER_WIKI="https://github.com/acmesh-official/acme.sh/wiki/Server" |
| 171 | |
| 172 _PREFERRED_CHAIN_WIKI="https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain" | |
| 173 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
174 _VALIDITY_WIKI="https://github.com/acmesh-official/acme.sh/wiki/Validity" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
175 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
176 _DNSCHECK_WIKI="https://github.com/acmesh-official/acme.sh/wiki/dnscheck" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
177 |
| 1630 | 178 _DNS_MANUAL_ERR="The dns manual mode can not renew automatically, you must issue it again manually. You'd better use the other modes instead." |
| 179 | |
| 180 _DNS_MANUAL_WARN="It seems that you are using dns manual mode. please take care: $_DNS_MANUAL_ERR" | |
| 181 | |
| 182 _DNS_MANUAL_ERROR="It seems that you are using dns manual mode. Read this link first: $_DNS_MANUAL_WIKI" | |
| 183 | |
| 184 __INTERACTIVE="" | |
| 185 if [ -t 1 ]; then | |
| 186 __INTERACTIVE="1" | |
| 187 fi | |
| 188 | |
| 189 __green() { | |
| 190 if [ "${__INTERACTIVE}${ACME_NO_COLOR:-0}" = "10" -o "${ACME_FORCE_COLOR}" = "1" ]; then | |
| 191 printf '\33[1;32m%b\33[0m' "$1" | |
| 192 return | |
| 193 fi | |
| 194 printf -- "%b" "$1" | |
| 195 } | |
| 196 | |
| 197 __red() { | |
| 198 if [ "${__INTERACTIVE}${ACME_NO_COLOR:-0}" = "10" -o "${ACME_FORCE_COLOR}" = "1" ]; then | |
| 199 printf '\33[1;31m%b\33[0m' "$1" | |
| 200 return | |
| 201 fi | |
| 202 printf -- "%b" "$1" | |
| 203 } | |
| 204 | |
| 205 _printargs() { | |
| 206 _exitstatus="$?" | |
| 207 if [ -z "$NO_TIMESTAMP" ] || [ "$NO_TIMESTAMP" = "0" ]; then | |
| 208 printf -- "%s" "[$(date)] " | |
| 209 fi | |
| 210 if [ -z "$2" ]; then | |
| 211 printf -- "%s" "$1" | |
| 212 else | |
| 213 printf -- "%s" "$1='$2'" | |
| 214 fi | |
| 215 printf "\n" | |
| 216 # return the saved exit status | |
| 217 return "$_exitstatus" | |
| 218 } | |
| 219 | |
| 220 _dlg_versions() { | |
| 221 echo "Diagnosis versions: " | |
| 222 echo "openssl:$ACME_OPENSSL_BIN" | |
| 223 if _exists "${ACME_OPENSSL_BIN:-openssl}"; then | |
| 224 ${ACME_OPENSSL_BIN:-openssl} version 2>&1 | |
| 225 else | |
| 226 echo "$ACME_OPENSSL_BIN doesn't exist." | |
| 227 fi | |
| 228 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
229 echo "Apache:" |
| 1630 | 230 if [ "$_APACHECTL" ] && _exists "$_APACHECTL"; then |
| 231 $_APACHECTL -V 2>&1 | |
| 232 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
233 echo "Apache doesn't exist." |
| 1630 | 234 fi |
| 235 | |
| 236 echo "nginx:" | |
| 237 if _exists "nginx"; then | |
| 238 nginx -V 2>&1 | |
| 239 else | |
| 240 echo "nginx doesn't exist." | |
| 241 fi | |
| 242 | |
| 243 echo "socat:" | |
| 244 if _exists "socat"; then | |
| 245 socat -V 2>&1 | |
| 246 else | |
| 247 _debug "socat doesn't exist." | |
| 248 fi | |
| 249 } | |
| 250 | |
| 251 #class | |
| 252 _syslog() { | |
| 253 _exitstatus="$?" | |
| 254 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" = "$SYSLOG_LEVEL_NONE" ]; then | |
| 255 return | |
| 256 fi | |
| 257 _logclass="$1" | |
| 258 shift | |
| 259 if [ -z "$__logger_i" ]; then | |
| 260 if _contains "$(logger --help 2>&1)" "-i"; then | |
| 261 __logger_i="logger -i" | |
| 262 else | |
| 263 __logger_i="logger" | |
| 264 fi | |
| 265 fi | |
| 266 $__logger_i -t "$PROJECT_NAME" -p "$_logclass" "$(_printargs "$@")" >/dev/null 2>&1 | |
| 267 return "$_exitstatus" | |
| 268 } | |
| 269 | |
| 270 _log() { | |
| 271 [ -z "$LOG_FILE" ] && return | |
| 272 _printargs "$@" >>"$LOG_FILE" | |
| 273 } | |
| 274 | |
| 275 _info() { | |
| 276 _log "$@" | |
| 277 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_INFO" ]; then | |
| 278 _syslog "$SYSLOG_INFO" "$@" | |
| 279 fi | |
| 280 _printargs "$@" | |
| 281 } | |
| 282 | |
| 283 _err() { | |
| 284 _syslog "$SYSLOG_ERROR" "$@" | |
| 285 _log "$@" | |
| 286 if [ -z "$NO_TIMESTAMP" ] || [ "$NO_TIMESTAMP" = "0" ]; then | |
| 287 printf -- "%s" "[$(date)] " >&2 | |
| 288 fi | |
| 289 if [ -z "$2" ]; then | |
| 290 __red "$1" >&2 | |
| 291 else | |
| 292 __red "$1='$2'" >&2 | |
| 293 fi | |
| 294 printf "\n" >&2 | |
| 295 return 1 | |
| 296 } | |
| 297 | |
| 298 _usage() { | |
| 299 __red "$@" >&2 | |
| 300 printf "\n" >&2 | |
| 301 } | |
| 302 | |
| 303 __debug_bash_helper() { | |
| 304 # At this point only do for --debug 3 | |
| 305 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -lt "$DEBUG_LEVEL_3" ]; then | |
| 306 return | |
| 307 fi | |
| 308 # Return extra debug info when running with bash, otherwise return empty | |
| 309 # string. | |
| 310 if [ -z "${BASH_VERSION}" ]; then | |
| 311 return | |
| 312 fi | |
| 313 # We are a bash shell at this point, return the filename, function name, and | |
| 314 # line number as a string | |
| 315 _dbh_saveIFS=$IFS | |
| 316 IFS=" " | |
| 317 # Must use eval or syntax error happens under dash. The eval should use | |
| 318 # single quotes as older versions of busybox had a bug with double quotes and | |
| 319 # eval. | |
| 320 # Use 'caller 1' as we want one level up the stack as we should be called | |
| 321 # by one of the _debug* functions | |
| 322 eval '_dbh_called=($(caller 1))' | |
| 323 IFS=$_dbh_saveIFS | |
| 324 eval '_dbh_file=${_dbh_called[2]}' | |
| 325 if [ -n "${_script_home}" ]; then | |
| 326 # Trim off the _script_home directory name | |
| 327 eval '_dbh_file=${_dbh_file#$_script_home/}' | |
| 328 fi | |
| 329 eval '_dbh_function=${_dbh_called[1]}' | |
| 330 eval '_dbh_lineno=${_dbh_called[0]}' | |
| 331 printf "%-40s " "$_dbh_file:${_dbh_function}:${_dbh_lineno}" | |
| 332 } | |
| 333 | |
| 334 _debug() { | |
| 335 if [ "${LOG_LEVEL:-$DEFAULT_LOG_LEVEL}" -ge "$LOG_LEVEL_1" ]; then | |
| 336 _log "$@" | |
| 337 fi | |
| 338 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_DEBUG" ]; then | |
| 339 _syslog "$SYSLOG_DEBUG" "$@" | |
| 340 fi | |
| 341 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -ge "$DEBUG_LEVEL_1" ]; then | |
| 342 _bash_debug=$(__debug_bash_helper) | |
| 343 _printargs "${_bash_debug}$@" >&2 | |
| 344 fi | |
| 345 } | |
| 346 | |
| 347 #output the sensitive messages | |
| 348 _secure_debug() { | |
| 349 if [ "${LOG_LEVEL:-$DEFAULT_LOG_LEVEL}" -ge "$LOG_LEVEL_1" ]; then | |
| 350 if [ "$OUTPUT_INSECURE" = "1" ]; then | |
| 351 _log "$@" | |
| 352 else | |
| 353 _log "$1" "$HIDDEN_VALUE" | |
| 354 fi | |
| 355 fi | |
| 356 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_DEBUG" ]; then | |
| 357 _syslog "$SYSLOG_DEBUG" "$1" "$HIDDEN_VALUE" | |
| 358 fi | |
| 359 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -ge "$DEBUG_LEVEL_1" ]; then | |
| 360 if [ "$OUTPUT_INSECURE" = "1" ]; then | |
| 361 _printargs "$@" >&2 | |
| 362 else | |
| 363 _printargs "$1" "$HIDDEN_VALUE" >&2 | |
| 364 fi | |
| 365 fi | |
| 366 } | |
| 367 | |
| 368 _debug2() { | |
| 369 if [ "${LOG_LEVEL:-$DEFAULT_LOG_LEVEL}" -ge "$LOG_LEVEL_2" ]; then | |
| 370 _log "$@" | |
| 371 fi | |
| 372 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_DEBUG_2" ]; then | |
| 373 _syslog "$SYSLOG_DEBUG" "$@" | |
| 374 fi | |
| 375 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -ge "$DEBUG_LEVEL_2" ]; then | |
| 376 _bash_debug=$(__debug_bash_helper) | |
| 377 _printargs "${_bash_debug}$@" >&2 | |
| 378 fi | |
| 379 } | |
| 380 | |
| 381 _secure_debug2() { | |
| 382 if [ "${LOG_LEVEL:-$DEFAULT_LOG_LEVEL}" -ge "$LOG_LEVEL_2" ]; then | |
| 383 if [ "$OUTPUT_INSECURE" = "1" ]; then | |
| 384 _log "$@" | |
| 385 else | |
| 386 _log "$1" "$HIDDEN_VALUE" | |
| 387 fi | |
| 388 fi | |
| 389 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_DEBUG_2" ]; then | |
| 390 _syslog "$SYSLOG_DEBUG" "$1" "$HIDDEN_VALUE" | |
| 391 fi | |
| 392 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -ge "$DEBUG_LEVEL_2" ]; then | |
| 393 if [ "$OUTPUT_INSECURE" = "1" ]; then | |
| 394 _printargs "$@" >&2 | |
| 395 else | |
| 396 _printargs "$1" "$HIDDEN_VALUE" >&2 | |
| 397 fi | |
| 398 fi | |
| 399 } | |
| 400 | |
| 401 _debug3() { | |
| 402 if [ "${LOG_LEVEL:-$DEFAULT_LOG_LEVEL}" -ge "$LOG_LEVEL_3" ]; then | |
| 403 _log "$@" | |
| 404 fi | |
| 405 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_DEBUG_3" ]; then | |
| 406 _syslog "$SYSLOG_DEBUG" "$@" | |
| 407 fi | |
| 408 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -ge "$DEBUG_LEVEL_3" ]; then | |
| 409 _bash_debug=$(__debug_bash_helper) | |
| 410 _printargs "${_bash_debug}$@" >&2 | |
| 411 fi | |
| 412 } | |
| 413 | |
| 414 _secure_debug3() { | |
| 415 if [ "${LOG_LEVEL:-$DEFAULT_LOG_LEVEL}" -ge "$LOG_LEVEL_3" ]; then | |
| 416 if [ "$OUTPUT_INSECURE" = "1" ]; then | |
| 417 _log "$@" | |
| 418 else | |
| 419 _log "$1" "$HIDDEN_VALUE" | |
| 420 fi | |
| 421 fi | |
| 422 if [ "${SYS_LOG:-$SYSLOG_LEVEL_NONE}" -ge "$SYSLOG_LEVEL_DEBUG_3" ]; then | |
| 423 _syslog "$SYSLOG_DEBUG" "$1" "$HIDDEN_VALUE" | |
| 424 fi | |
| 425 if [ "${DEBUG:-$DEBUG_LEVEL_NONE}" -ge "$DEBUG_LEVEL_3" ]; then | |
| 426 if [ "$OUTPUT_INSECURE" = "1" ]; then | |
| 427 _printargs "$@" >&2 | |
| 428 else | |
| 429 _printargs "$1" "$HIDDEN_VALUE" >&2 | |
| 430 fi | |
| 431 fi | |
| 432 } | |
| 433 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
434 __USE_TR_TAG="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
435 if [ "$(echo "abc" | LANG=C tr a-z A-Z 2>/dev/null)" != "ABC" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
436 __USE_TR_TAG="1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
437 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
438 export __USE_TR_TAG |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
439 |
| 1630 | 440 _upper_case() { |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
441 if [ "$__USE_TR_TAG" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
442 LANG=C tr '[:lower:]' '[:upper:]' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
443 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
444 # shellcheck disable=SC2018,SC2019 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
445 LANG=C tr '[a-z]' '[A-Z]' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
446 fi |
| 1630 | 447 } |
| 448 | |
| 449 _lower_case() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
450 if [ "$__USE_TR_TAG" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
451 LANG=C tr '[:upper:]' '[:lower:]' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
452 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
453 # shellcheck disable=SC2018,SC2019 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
454 LANG=C tr '[A-Z]' '[a-z]' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
455 fi |
| 1630 | 456 } |
| 457 | |
| 458 _startswith() { | |
| 459 _str="$1" | |
| 460 _sub="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
461 echo "$_str" | grep -- "^$_sub" >/dev/null 2>&1 |
| 1630 | 462 } |
| 463 | |
| 464 _endswith() { | |
| 465 _str="$1" | |
| 466 _sub="$2" | |
| 467 echo "$_str" | grep -- "$_sub\$" >/dev/null 2>&1 | |
| 468 } | |
| 469 | |
| 470 _contains() { | |
| 471 _str="$1" | |
| 472 _sub="$2" | |
| 473 echo "$_str" | grep -- "$_sub" >/dev/null 2>&1 | |
| 474 } | |
| 475 | |
| 476 _hasfield() { | |
| 477 _str="$1" | |
| 478 _field="$2" | |
| 479 _sep="$3" | |
| 480 if [ -z "$_field" ]; then | |
| 481 _usage "Usage: str field [sep]" | |
| 482 return 1 | |
| 483 fi | |
| 484 | |
| 485 if [ -z "$_sep" ]; then | |
| 486 _sep="," | |
| 487 fi | |
| 488 | |
| 489 for f in $(echo "$_str" | tr "$_sep" ' '); do | |
| 490 if [ "$f" = "$_field" ]; then | |
| 491 _debug2 "'$_str' contains '$_field'" | |
| 492 return 0 #contains ok | |
| 493 fi | |
| 494 done | |
| 495 _debug2 "'$_str' does not contain '$_field'" | |
| 496 return 1 #not contains | |
| 497 } | |
| 498 | |
| 499 # str index [sep] | |
| 500 _getfield() { | |
| 501 _str="$1" | |
| 502 _findex="$2" | |
| 503 _sep="$3" | |
| 504 | |
| 505 if [ -z "$_findex" ]; then | |
| 506 _usage "Usage: str field [sep]" | |
| 507 return 1 | |
| 508 fi | |
| 509 | |
| 510 if [ -z "$_sep" ]; then | |
| 511 _sep="," | |
| 512 fi | |
| 513 | |
| 514 _ffi="$_findex" | |
| 515 while [ "$_ffi" -gt "0" ]; do | |
| 516 _fv="$(echo "$_str" | cut -d "$_sep" -f "$_ffi")" | |
| 517 if [ "$_fv" ]; then | |
| 518 printf -- "%s" "$_fv" | |
| 519 return 0 | |
| 520 fi | |
| 521 _ffi="$(_math "$_ffi" - 1)" | |
| 522 done | |
| 523 | |
| 524 printf -- "%s" "$_str" | |
| 525 | |
| 526 } | |
| 527 | |
| 528 _exists() { | |
| 529 cmd="$1" | |
| 530 if [ -z "$cmd" ]; then | |
| 531 _usage "Usage: _exists cmd" | |
| 532 return 1 | |
| 533 fi | |
| 534 | |
| 535 if eval type type >/dev/null 2>&1; then | |
| 536 eval type "$cmd" >/dev/null 2>&1 | |
| 537 elif command >/dev/null 2>&1; then | |
| 538 command -v "$cmd" >/dev/null 2>&1 | |
| 539 else | |
| 540 which "$cmd" >/dev/null 2>&1 | |
| 541 fi | |
| 542 ret="$?" | |
| 543 _debug3 "$cmd exists=$ret" | |
| 544 return $ret | |
| 545 } | |
| 546 | |
| 547 #a + b | |
| 548 _math() { | |
| 549 _m_opts="$@" | |
| 550 printf "%s" "$(($_m_opts))" | |
| 551 } | |
| 552 | |
| 553 _h_char_2_dec() { | |
| 554 _ch=$1 | |
| 555 case "${_ch}" in | |
| 556 a | A) | |
| 557 printf "10" | |
| 558 ;; | |
| 559 b | B) | |
| 560 printf "11" | |
| 561 ;; | |
| 562 c | C) | |
| 563 printf "12" | |
| 564 ;; | |
| 565 d | D) | |
| 566 printf "13" | |
| 567 ;; | |
| 568 e | E) | |
| 569 printf "14" | |
| 570 ;; | |
| 571 f | F) | |
| 572 printf "15" | |
| 573 ;; | |
| 574 *) | |
| 575 printf "%s" "$_ch" | |
| 576 ;; | |
| 577 esac | |
| 578 | |
| 579 } | |
| 580 | |
| 581 _URGLY_PRINTF="" | |
| 582 if [ "$(printf '\x41')" != 'A' ]; then | |
| 583 _URGLY_PRINTF=1 | |
| 584 fi | |
| 585 | |
| 586 _ESCAPE_XARGS="" | |
| 587 if _exists xargs && [ "$(printf %s '\\x41' | xargs printf)" = 'A' ]; then | |
| 588 _ESCAPE_XARGS=1 | |
| 589 fi | |
| 590 | |
| 591 _h2b() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
592 if _exists xxd; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
593 if _contains "$(xxd --help 2>&1)" "assumes -c30"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
594 if xxd -r -p -c 9999 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
595 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
596 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
597 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
598 if xxd -r -p 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
599 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
600 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
601 fi |
| 1630 | 602 fi |
| 603 | |
| 604 hex=$(cat) | |
| 605 ic="" | |
| 606 jc="" | |
| 607 _debug2 _URGLY_PRINTF "$_URGLY_PRINTF" | |
| 608 if [ -z "$_URGLY_PRINTF" ]; then | |
| 609 if [ "$_ESCAPE_XARGS" ] && _exists xargs; then | |
| 610 _debug2 "xargs" | |
| 611 echo "$hex" | _upper_case | sed 's/\([0-9A-F]\{2\}\)/\\\\\\x\1/g' | xargs printf | |
| 612 else | |
| 613 for h in $(echo "$hex" | _upper_case | sed 's/\([0-9A-F]\{2\}\)/ \1/g'); do | |
| 614 if [ -z "$h" ]; then | |
| 615 break | |
| 616 fi | |
| 617 printf "\x$h%s" | |
| 618 done | |
| 619 fi | |
| 620 else | |
| 621 for c in $(echo "$hex" | _upper_case | sed 's/\([0-9A-F]\)/ \1/g'); do | |
| 622 if [ -z "$ic" ]; then | |
| 623 ic=$c | |
| 624 continue | |
| 625 fi | |
| 626 jc=$c | |
| 627 ic="$(_h_char_2_dec "$ic")" | |
| 628 jc="$(_h_char_2_dec "$jc")" | |
| 629 printf '\'"$(printf "%o" "$(_math "$ic" \* 16 + $jc)")""%s" | |
| 630 ic="" | |
| 631 jc="" | |
| 632 done | |
| 633 fi | |
| 634 | |
| 635 } | |
| 636 | |
| 637 _is_solaris() { | |
| 638 _contains "${__OS__:=$(uname -a)}" "solaris" || _contains "${__OS__:=$(uname -a)}" "SunOS" | |
| 639 } | |
| 640 | |
| 641 #_ascii_hex str | |
| 642 #this can only process ascii chars, should only be used when od command is missing as a backup way. | |
| 643 _ascii_hex() { | |
| 644 _debug2 "Using _ascii_hex" | |
| 645 _str="$1" | |
| 646 _str_len=${#_str} | |
| 647 _h_i=1 | |
| 648 while [ "$_h_i" -le "$_str_len" ]; do | |
| 649 _str_c="$(printf "%s" "$_str" | cut -c "$_h_i")" | |
| 650 printf " %02x" "'$_str_c" | |
| 651 _h_i="$(_math "$_h_i" + 1)" | |
| 652 done | |
| 653 } | |
| 654 | |
| 655 #stdin output hexstr splited by one space | |
| 656 #input:"abc" | |
| 657 #output: " 61 62 63" | |
| 658 _hex_dump() { | |
| 659 if _exists od; then | |
| 660 od -A n -v -t x1 | tr -s " " | sed 's/ $//' | tr -d "\r\t\n" | |
| 661 elif _exists hexdump; then | |
| 662 _debug3 "using hexdump" | |
| 663 hexdump -v -e '/1 ""' -e '/1 " %02x" ""' | |
| 664 elif _exists xxd; then | |
| 665 _debug3 "using xxd" | |
| 666 xxd -ps -c 20 -i | sed "s/ 0x/ /g" | tr -d ",\n" | tr -s " " | |
| 667 else | |
| 668 _debug3 "using _ascii_hex" | |
| 669 str=$(cat) | |
| 670 _ascii_hex "$str" | |
| 671 fi | |
| 672 } | |
| 673 | |
| 674 #url encode, no-preserved chars | |
| 675 #A B C D E F G H I J K L M N O P Q R S T U V W X Y Z | |
| 676 #41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a | |
| 677 | |
| 678 #a b c d e f g h i j k l m n o p q r s t u v w x y z | |
| 679 #61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a | |
| 680 | |
| 681 #0 1 2 3 4 5 6 7 8 9 - _ . ~ | |
| 682 #30 31 32 33 34 35 36 37 38 39 2d 5f 2e 7e | |
| 683 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
684 #_url_encode [upper-hex] the encoded hex will be upper-case if the argument upper-hex is followed |
| 1630 | 685 #stdin stdout |
| 686 _url_encode() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
687 _upper_hex=$1 |
| 1630 | 688 _hex_str=$(_hex_dump) |
| 689 _debug3 "_url_encode" | |
| 690 _debug3 "_hex_str" "$_hex_str" | |
| 691 for _hex_code in $_hex_str; do | |
| 692 #upper case | |
| 693 case "${_hex_code}" in | |
| 694 "41") | |
| 695 printf "%s" "A" | |
| 696 ;; | |
| 697 "42") | |
| 698 printf "%s" "B" | |
| 699 ;; | |
| 700 "43") | |
| 701 printf "%s" "C" | |
| 702 ;; | |
| 703 "44") | |
| 704 printf "%s" "D" | |
| 705 ;; | |
| 706 "45") | |
| 707 printf "%s" "E" | |
| 708 ;; | |
| 709 "46") | |
| 710 printf "%s" "F" | |
| 711 ;; | |
| 712 "47") | |
| 713 printf "%s" "G" | |
| 714 ;; | |
| 715 "48") | |
| 716 printf "%s" "H" | |
| 717 ;; | |
| 718 "49") | |
| 719 printf "%s" "I" | |
| 720 ;; | |
| 721 "4a") | |
| 722 printf "%s" "J" | |
| 723 ;; | |
| 724 "4b") | |
| 725 printf "%s" "K" | |
| 726 ;; | |
| 727 "4c") | |
| 728 printf "%s" "L" | |
| 729 ;; | |
| 730 "4d") | |
| 731 printf "%s" "M" | |
| 732 ;; | |
| 733 "4e") | |
| 734 printf "%s" "N" | |
| 735 ;; | |
| 736 "4f") | |
| 737 printf "%s" "O" | |
| 738 ;; | |
| 739 "50") | |
| 740 printf "%s" "P" | |
| 741 ;; | |
| 742 "51") | |
| 743 printf "%s" "Q" | |
| 744 ;; | |
| 745 "52") | |
| 746 printf "%s" "R" | |
| 747 ;; | |
| 748 "53") | |
| 749 printf "%s" "S" | |
| 750 ;; | |
| 751 "54") | |
| 752 printf "%s" "T" | |
| 753 ;; | |
| 754 "55") | |
| 755 printf "%s" "U" | |
| 756 ;; | |
| 757 "56") | |
| 758 printf "%s" "V" | |
| 759 ;; | |
| 760 "57") | |
| 761 printf "%s" "W" | |
| 762 ;; | |
| 763 "58") | |
| 764 printf "%s" "X" | |
| 765 ;; | |
| 766 "59") | |
| 767 printf "%s" "Y" | |
| 768 ;; | |
| 769 "5a") | |
| 770 printf "%s" "Z" | |
| 771 ;; | |
| 772 | |
| 773 #lower case | |
| 774 "61") | |
| 775 printf "%s" "a" | |
| 776 ;; | |
| 777 "62") | |
| 778 printf "%s" "b" | |
| 779 ;; | |
| 780 "63") | |
| 781 printf "%s" "c" | |
| 782 ;; | |
| 783 "64") | |
| 784 printf "%s" "d" | |
| 785 ;; | |
| 786 "65") | |
| 787 printf "%s" "e" | |
| 788 ;; | |
| 789 "66") | |
| 790 printf "%s" "f" | |
| 791 ;; | |
| 792 "67") | |
| 793 printf "%s" "g" | |
| 794 ;; | |
| 795 "68") | |
| 796 printf "%s" "h" | |
| 797 ;; | |
| 798 "69") | |
| 799 printf "%s" "i" | |
| 800 ;; | |
| 801 "6a") | |
| 802 printf "%s" "j" | |
| 803 ;; | |
| 804 "6b") | |
| 805 printf "%s" "k" | |
| 806 ;; | |
| 807 "6c") | |
| 808 printf "%s" "l" | |
| 809 ;; | |
| 810 "6d") | |
| 811 printf "%s" "m" | |
| 812 ;; | |
| 813 "6e") | |
| 814 printf "%s" "n" | |
| 815 ;; | |
| 816 "6f") | |
| 817 printf "%s" "o" | |
| 818 ;; | |
| 819 "70") | |
| 820 printf "%s" "p" | |
| 821 ;; | |
| 822 "71") | |
| 823 printf "%s" "q" | |
| 824 ;; | |
| 825 "72") | |
| 826 printf "%s" "r" | |
| 827 ;; | |
| 828 "73") | |
| 829 printf "%s" "s" | |
| 830 ;; | |
| 831 "74") | |
| 832 printf "%s" "t" | |
| 833 ;; | |
| 834 "75") | |
| 835 printf "%s" "u" | |
| 836 ;; | |
| 837 "76") | |
| 838 printf "%s" "v" | |
| 839 ;; | |
| 840 "77") | |
| 841 printf "%s" "w" | |
| 842 ;; | |
| 843 "78") | |
| 844 printf "%s" "x" | |
| 845 ;; | |
| 846 "79") | |
| 847 printf "%s" "y" | |
| 848 ;; | |
| 849 "7a") | |
| 850 printf "%s" "z" | |
| 851 ;; | |
| 852 #numbers | |
| 853 "30") | |
| 854 printf "%s" "0" | |
| 855 ;; | |
| 856 "31") | |
| 857 printf "%s" "1" | |
| 858 ;; | |
| 859 "32") | |
| 860 printf "%s" "2" | |
| 861 ;; | |
| 862 "33") | |
| 863 printf "%s" "3" | |
| 864 ;; | |
| 865 "34") | |
| 866 printf "%s" "4" | |
| 867 ;; | |
| 868 "35") | |
| 869 printf "%s" "5" | |
| 870 ;; | |
| 871 "36") | |
| 872 printf "%s" "6" | |
| 873 ;; | |
| 874 "37") | |
| 875 printf "%s" "7" | |
| 876 ;; | |
| 877 "38") | |
| 878 printf "%s" "8" | |
| 879 ;; | |
| 880 "39") | |
| 881 printf "%s" "9" | |
| 882 ;; | |
| 883 "2d") | |
| 884 printf "%s" "-" | |
| 885 ;; | |
| 886 "5f") | |
| 887 printf "%s" "_" | |
| 888 ;; | |
| 889 "2e") | |
| 890 printf "%s" "." | |
| 891 ;; | |
| 892 "7e") | |
| 893 printf "%s" "~" | |
| 894 ;; | |
| 895 #other hex | |
| 896 *) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
897 if [ "$_upper_hex" = "upper-hex" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
898 _hex_code=$(printf "%s" "$_hex_code" | _upper_case) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
899 fi |
| 1630 | 900 printf '%%%s' "$_hex_code" |
| 901 ;; | |
| 902 esac | |
| 903 done | |
| 904 } | |
| 905 | |
| 906 _json_encode() { | |
| 907 _j_str="$(sed 's/"/\\"/g' | sed "s/\r/\\r/g")" | |
| 908 _debug3 "_json_encode" | |
| 909 _debug3 "_j_str" "$_j_str" | |
| 910 echo "$_j_str" | _hex_dump | _lower_case | sed 's/0a/5c 6e/g' | tr -d ' ' | _h2b | tr -d "\r\n" | |
| 911 } | |
| 912 | |
| 913 #from: http:\/\/ to http:// | |
| 914 _json_decode() { | |
| 915 _j_str="$(sed 's#\\/#/#g')" | |
| 916 _debug3 "_json_decode" | |
| 917 _debug3 "_j_str" "$_j_str" | |
| 918 echo "$_j_str" | |
| 919 } | |
| 920 | |
| 921 #options file | |
| 922 _sed_i() { | |
| 923 options="$1" | |
| 924 filename="$2" | |
| 925 if [ -z "$filename" ]; then | |
| 926 _usage "Usage:_sed_i options filename" | |
| 927 return 1 | |
| 928 fi | |
| 929 _debug2 options "$options" | |
| 930 if sed -h 2>&1 | grep "\-i\[SUFFIX]" >/dev/null 2>&1; then | |
| 931 _debug "Using sed -i" | |
| 932 sed -i "$options" "$filename" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
933 elif sed -h 2>&1 | grep "\-i extension" >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
934 _debug "Using FreeBSD sed -i" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
935 sed -i "" "$options" "$filename" |
| 1630 | 936 else |
| 937 _debug "No -i support in sed" | |
| 938 text="$(cat "$filename")" | |
| 939 echo "$text" | sed "$options" >"$filename" | |
| 940 fi | |
| 941 } | |
| 942 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
943 if [ "$(echo abc | egrep -o b 2>/dev/null)" = "b" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
944 __USE_EGREP=1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
945 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
946 __USE_EGREP="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
947 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
948 |
| 1630 | 949 _egrep_o() { |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
950 if [ "$__USE_EGREP" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
951 egrep -o -- "$1" 2>/dev/null |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
952 else |
| 1630 | 953 sed -n 's/.*\('"$1"'\).*/\1/p' |
| 954 fi | |
| 955 } | |
| 956 | |
| 957 #Usage: file startline endline | |
| 958 _getfile() { | |
| 959 filename="$1" | |
| 960 startline="$2" | |
| 961 endline="$3" | |
| 962 if [ -z "$endline" ]; then | |
| 963 _usage "Usage: file startline endline" | |
| 964 return 1 | |
| 965 fi | |
| 966 | |
| 967 i="$(grep -n -- "$startline" "$filename" | cut -d : -f 1)" | |
| 968 if [ -z "$i" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
969 _err "Cannot find start line: $startline" |
| 1630 | 970 return 1 |
| 971 fi | |
| 972 i="$(_math "$i" + 1)" | |
| 973 _debug i "$i" | |
| 974 | |
| 975 j="$(grep -n -- "$endline" "$filename" | cut -d : -f 1)" | |
| 976 if [ -z "$j" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
977 _err "Cannot find end line: $endline" |
| 1630 | 978 return 1 |
| 979 fi | |
| 980 j="$(_math "$j" - 1)" | |
| 981 _debug j "$j" | |
| 982 | |
| 983 sed -n "$i,${j}p" "$filename" | |
| 984 | |
| 985 } | |
| 986 | |
| 987 #Usage: multiline | |
| 988 _base64() { | |
| 989 [ "" ] #urgly | |
| 990 if [ "$1" ]; then | |
| 991 _debug3 "base64 multiline:'$1'" | |
| 992 ${ACME_OPENSSL_BIN:-openssl} base64 -e | |
| 993 else | |
| 994 _debug3 "base64 single line." | |
| 995 ${ACME_OPENSSL_BIN:-openssl} base64 -e | tr -d '\r\n' | |
| 996 fi | |
| 997 } | |
| 998 | |
| 999 #Usage: multiline | |
| 1000 _dbase64() { | |
| 1001 if [ "$1" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1002 ${ACME_OPENSSL_BIN:-openssl} base64 -d |
| 1630 | 1003 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1004 ${ACME_OPENSSL_BIN:-openssl} base64 -d -A |
| 1630 | 1005 fi |
| 1006 } | |
| 1007 | |
| 1008 #file | |
| 1009 _checkcert() { | |
| 1010 _cf="$1" | |
| 1011 if [ "$DEBUG" ]; then | |
| 1012 ${ACME_OPENSSL_BIN:-openssl} x509 -noout -text -in "$_cf" | |
| 1013 else | |
| 1014 ${ACME_OPENSSL_BIN:-openssl} x509 -noout -text -in "$_cf" >/dev/null 2>&1 | |
| 1015 fi | |
| 1016 } | |
| 1017 | |
| 1018 #Usage: hashalg [outputhex] | |
| 1019 #Output Base64-encoded digest | |
| 1020 _digest() { | |
| 1021 alg="$1" | |
| 1022 if [ -z "$alg" ]; then | |
| 1023 _usage "Usage: _digest hashalg" | |
| 1024 return 1 | |
| 1025 fi | |
| 1026 | |
| 1027 outputhex="$2" | |
| 1028 | |
| 1029 if [ "$alg" = "sha256" ] || [ "$alg" = "sha1" ] || [ "$alg" = "md5" ]; then | |
| 1030 if [ "$outputhex" ]; then | |
| 1031 ${ACME_OPENSSL_BIN:-openssl} dgst -"$alg" -hex | cut -d = -f 2 | tr -d ' ' | |
| 1032 else | |
| 1033 ${ACME_OPENSSL_BIN:-openssl} dgst -"$alg" -binary | _base64 | |
| 1034 fi | |
| 1035 else | |
| 1036 _err "$alg is not supported yet" | |
| 1037 return 1 | |
| 1038 fi | |
| 1039 | |
| 1040 } | |
| 1041 | |
| 1042 #Usage: hashalg secret_hex [outputhex] | |
| 1043 #Output binary hmac | |
| 1044 _hmac() { | |
| 1045 alg="$1" | |
| 1046 secret_hex="$2" | |
| 1047 outputhex="$3" | |
| 1048 | |
| 1049 if [ -z "$secret_hex" ]; then | |
| 1050 _usage "Usage: _hmac hashalg secret [outputhex]" | |
| 1051 return 1 | |
| 1052 fi | |
| 1053 | |
| 1054 if [ "$alg" = "sha256" ] || [ "$alg" = "sha1" ]; then | |
| 1055 if [ "$outputhex" ]; then | |
| 1056 (${ACME_OPENSSL_BIN:-openssl} dgst -"$alg" -mac HMAC -macopt "hexkey:$secret_hex" 2>/dev/null || ${ACME_OPENSSL_BIN:-openssl} dgst -"$alg" -hmac "$(printf "%s" "$secret_hex" | _h2b)") | cut -d = -f 2 | tr -d ' ' | |
| 1057 else | |
| 1058 ${ACME_OPENSSL_BIN:-openssl} dgst -"$alg" -mac HMAC -macopt "hexkey:$secret_hex" -binary 2>/dev/null || ${ACME_OPENSSL_BIN:-openssl} dgst -"$alg" -hmac "$(printf "%s" "$secret_hex" | _h2b)" -binary | |
| 1059 fi | |
| 1060 else | |
| 1061 _err "$alg is not supported yet" | |
| 1062 return 1 | |
| 1063 fi | |
| 1064 | |
| 1065 } | |
| 1066 | |
| 1067 #Usage: keyfile hashalg | |
| 1068 #Output: Base64-encoded signature value | |
| 1069 _sign() { | |
| 1070 keyfile="$1" | |
| 1071 alg="$2" | |
| 1072 if [ -z "$alg" ]; then | |
| 1073 _usage "Usage: _sign keyfile hashalg" | |
| 1074 return 1 | |
| 1075 fi | |
| 1076 | |
| 1077 _sign_openssl="${ACME_OPENSSL_BIN:-openssl} dgst -sign $keyfile " | |
| 1078 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1079 if _isRSA "$keyfile" >/dev/null 2>&1; then |
| 1630 | 1080 $_sign_openssl -$alg | _base64 |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1081 elif _isEcc "$keyfile" >/dev/null 2>&1; then |
| 1630 | 1082 if ! _signedECText="$($_sign_openssl -sha$__ECC_KEY_LEN | ${ACME_OPENSSL_BIN:-openssl} asn1parse -inform DER)"; then |
| 1083 _err "Sign failed: $_sign_openssl" | |
| 1084 _err "Key file: $keyfile" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1085 _err "Key content: $(wc -l <"$keyfile") lines" |
| 1630 | 1086 return 1 |
| 1087 fi | |
| 1088 _debug3 "_signedECText" "$_signedECText" | |
| 1089 _ec_r="$(echo "$_signedECText" | _head_n 2 | _tail_n 1 | cut -d : -f 4 | tr -d "\r\n")" | |
| 1090 _ec_s="$(echo "$_signedECText" | _head_n 3 | _tail_n 1 | cut -d : -f 4 | tr -d "\r\n")" | |
| 1091 if [ "$__ECC_KEY_LEN" -eq "256" ]; then | |
| 1092 while [ "${#_ec_r}" -lt "64" ]; do | |
| 1093 _ec_r="0${_ec_r}" | |
| 1094 done | |
| 1095 while [ "${#_ec_s}" -lt "64" ]; do | |
| 1096 _ec_s="0${_ec_s}" | |
| 1097 done | |
| 1098 fi | |
| 1099 if [ "$__ECC_KEY_LEN" -eq "384" ]; then | |
| 1100 while [ "${#_ec_r}" -lt "96" ]; do | |
| 1101 _ec_r="0${_ec_r}" | |
| 1102 done | |
| 1103 while [ "${#_ec_s}" -lt "96" ]; do | |
| 1104 _ec_s="0${_ec_s}" | |
| 1105 done | |
| 1106 fi | |
| 1107 if [ "$__ECC_KEY_LEN" -eq "512" ]; then | |
| 1108 while [ "${#_ec_r}" -lt "132" ]; do | |
| 1109 _ec_r="0${_ec_r}" | |
| 1110 done | |
| 1111 while [ "${#_ec_s}" -lt "132" ]; do | |
| 1112 _ec_s="0${_ec_s}" | |
| 1113 done | |
| 1114 fi | |
| 1115 _debug3 "_ec_r" "$_ec_r" | |
| 1116 _debug3 "_ec_s" "$_ec_s" | |
| 1117 printf "%s" "$_ec_r$_ec_s" | _h2b | _base64 | |
| 1118 else | |
| 1119 _err "Unknown key file format." | |
| 1120 return 1 | |
| 1121 fi | |
| 1122 | |
| 1123 } | |
| 1124 | |
| 1125 #keylength or isEcc flag (empty str => not ecc) | |
| 1126 _isEccKey() { | |
| 1127 _length="$1" | |
| 1128 | |
| 1129 if [ -z "$_length" ]; then | |
| 1130 return 1 | |
| 1131 fi | |
| 1132 | |
| 1133 [ "$_length" != "1024" ] && | |
| 1134 [ "$_length" != "2048" ] && | |
| 1135 [ "$_length" != "3072" ] && | |
| 1136 [ "$_length" != "4096" ] && | |
| 1137 [ "$_length" != "8192" ] | |
| 1138 } | |
| 1139 | |
| 1140 # _createkey 2048|ec-256 file | |
| 1141 _createkey() { | |
| 1142 length="$1" | |
| 1143 f="$2" | |
| 1144 _debug2 "_createkey for file:$f" | |
| 1145 eccname="$length" | |
| 1146 if _startswith "$length" "ec-"; then | |
| 1147 length=$(printf "%s" "$length" | cut -d '-' -f 2-100) | |
| 1148 | |
| 1149 if [ "$length" = "256" ]; then | |
| 1150 eccname="prime256v1" | |
| 1151 fi | |
| 1152 if [ "$length" = "384" ]; then | |
| 1153 eccname="secp384r1" | |
| 1154 fi | |
| 1155 if [ "$length" = "521" ]; then | |
| 1156 eccname="secp521r1" | |
| 1157 fi | |
| 1158 | |
| 1159 fi | |
| 1160 | |
| 1161 if [ -z "$length" ]; then | |
| 1162 length=2048 | |
| 1163 fi | |
| 1164 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1165 _debug "Using length $length" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1166 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1167 if ! [ -e "$f" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1168 if ! touch "$f" >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1169 _f_path="$(dirname "$f")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1170 _debug _f_path "$_f_path" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1171 if ! mkdir -p "$_f_path"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1172 _err "Cannot create path: $_f_path" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1173 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1174 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1175 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1176 if ! touch "$f" >/dev/null 2>&1; then |
| 1630 | 1177 return 1 |
| 1178 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1179 chmod 600 "$f" |
| 1630 | 1180 fi |
| 1181 | |
| 1182 if _isEccKey "$length"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1183 _debug "Using EC name: $eccname" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1184 if _opkey="$(${ACME_OPENSSL_BIN:-openssl} ecparam -name "$eccname" -noout -genkey 2>/dev/null)"; then |
| 1630 | 1185 echo "$_opkey" >"$f" |
| 1186 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1187 _err "Error encountered for ECC key named $eccname" |
| 1630 | 1188 return 1 |
| 1189 fi | |
| 1190 else | |
| 1191 _debug "Using RSA: $length" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1192 __traditional="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1193 if _contains "$(${ACME_OPENSSL_BIN:-openssl} help genrsa 2>&1)" "-traditional"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1194 __traditional="-traditional" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1195 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1196 if _opkey="$(${ACME_OPENSSL_BIN:-openssl} genrsa $__traditional "$length" 2>/dev/null)"; then |
| 1630 | 1197 echo "$_opkey" >"$f" |
| 1198 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1199 _err "Error encountered for RSA key of length $length" |
| 1630 | 1200 return 1 |
| 1201 fi | |
| 1202 fi | |
| 1203 | |
| 1204 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1205 _err "Key creation error." |
| 1630 | 1206 return 1 |
| 1207 fi | |
| 1208 } | |
| 1209 | |
| 1210 #domain | |
| 1211 _is_idn() { | |
| 1212 _is_idn_d="$1" | |
| 1213 _debug2 _is_idn_d "$_is_idn_d" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1214 _idn_temp=$(printf "%s" "$_is_idn_d" | tr -d '[0-9]' | tr -d '[a-z]' | tr -d '[A-Z]' | tr -d '*.,-_') |
| 1630 | 1215 _debug2 _idn_temp "$_idn_temp" |
| 1216 [ "$_idn_temp" ] | |
| 1217 } | |
| 1218 | |
| 1219 #aa.com | |
| 1220 #aa.com,bb.com,cc.com | |
| 1221 _idn() { | |
| 1222 __idn_d="$1" | |
| 1223 if ! _is_idn "$__idn_d"; then | |
| 1224 printf "%s" "$__idn_d" | |
| 1225 return 0 | |
| 1226 fi | |
| 1227 | |
| 1228 if _exists idn; then | |
| 1229 if _contains "$__idn_d" ','; then | |
| 1230 _i_first="1" | |
| 1231 for f in $(echo "$__idn_d" | tr ',' ' '); do | |
| 1232 [ -z "$f" ] && continue | |
| 1233 if [ -z "$_i_first" ]; then | |
| 1234 printf "%s" "," | |
| 1235 else | |
| 1236 _i_first="" | |
| 1237 fi | |
| 1238 idn --quiet "$f" | tr -d "\r\n" | |
| 1239 done | |
| 1240 else | |
| 1241 idn "$__idn_d" | tr -d "\r\n" | |
| 1242 fi | |
| 1243 else | |
| 1244 _err "Please install idn to process IDN names." | |
| 1245 fi | |
| 1246 } | |
| 1247 | |
| 1248 #_createcsr cn san_list keyfile csrfile conf acmeValidationv1 | |
| 1249 _createcsr() { | |
| 1250 _debug _createcsr | |
| 1251 domain="$1" | |
| 1252 domainlist="$2" | |
| 1253 csrkey="$3" | |
| 1254 csr="$4" | |
| 1255 csrconf="$5" | |
| 1256 acmeValidationv1="$6" | |
| 1257 _debug2 domain "$domain" | |
| 1258 _debug2 domainlist "$domainlist" | |
| 1259 _debug2 csrkey "$csrkey" | |
| 1260 _debug2 csr "$csr" | |
| 1261 _debug2 csrconf "$csrconf" | |
| 1262 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1263 printf "[ req_distinguished_name ]\n[ req ]\ndistinguished_name = req_distinguished_name\nreq_extensions = v3_req\n[ v3_req ]" >"$csrconf" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1264 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1265 if [ "$Le_ExtKeyUse" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1266 _savedomainconf Le_ExtKeyUse "$Le_ExtKeyUse" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1267 printf "\nextendedKeyUsage=$Le_ExtKeyUse\n" >>"$csrconf" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1268 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1269 printf "\nextendedKeyUsage=serverAuth,clientAuth\n" >>"$csrconf" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1270 fi |
| 1630 | 1271 |
| 1272 if [ "$acmeValidationv1" ]; then | |
| 1273 domainlist="$(_idn "$domainlist")" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1274 _debug2 domainlist "$domainlist" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1275 alt="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1276 for dl in $(echo "$domainlist" | tr "," ' '); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1277 if [ "$alt" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1278 alt="$alt,$(_getIdType "$dl" | _upper_case):$dl" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1279 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1280 alt="$(_getIdType "$dl" | _upper_case):$dl" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1281 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1282 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1283 printf -- "\nsubjectAltName=$alt" >>"$csrconf" |
| 1630 | 1284 elif [ -z "$domainlist" ] || [ "$domainlist" = "$NO_VALUE" ]; then |
| 1285 #single domain | |
| 1286 _info "Single domain" "$domain" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1287 printf -- "\nsubjectAltName=$(_getIdType "$domain" | _upper_case):$(_idn "$domain")" >>"$csrconf" |
| 1630 | 1288 else |
| 1289 domainlist="$(_idn "$domainlist")" | |
| 1290 _debug2 domainlist "$domainlist" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1291 alt="$(_getIdType "$domain" | _upper_case):$(_idn "$domain")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1292 for dl in $(echo "'$domainlist'" | sed "s/,/' '/g"); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1293 dl=$(echo "$dl" | tr -d "'") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1294 alt="$alt,$(_getIdType "$dl" | _upper_case):$dl" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1295 done |
| 1630 | 1296 #multi |
| 1297 _info "Multi domain" "$alt" | |
| 1298 printf -- "\nsubjectAltName=$alt" >>"$csrconf" | |
| 1299 fi | |
| 1300 if [ "$Le_OCSP_Staple" = "1" ]; then | |
| 1301 _savedomainconf Le_OCSP_Staple "$Le_OCSP_Staple" | |
| 1302 printf -- "\nbasicConstraints = CA:FALSE\n1.3.6.1.5.5.7.1.24=DER:30:03:02:01:05" >>"$csrconf" | |
| 1303 fi | |
| 1304 | |
| 1305 if [ "$acmeValidationv1" ]; then | |
| 1306 printf "\n1.3.6.1.5.5.7.1.31=critical,DER:04:20:${acmeValidationv1}" >>"${csrconf}" | |
| 1307 fi | |
| 1308 | |
| 1309 _csr_cn="$(_idn "$domain")" | |
| 1310 _debug2 _csr_cn "$_csr_cn" | |
| 1311 if _contains "$(uname -a)" "MINGW"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1312 if _isIP "$_csr_cn"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1313 ${ACME_OPENSSL_BIN:-openssl} req -new -sha256 -key "$csrkey" -subj "//O=$PROJECT_NAME" -config "$csrconf" -out "$csr" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1314 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1315 ${ACME_OPENSSL_BIN:-openssl} req -new -sha256 -key "$csrkey" -subj "//CN=$_csr_cn" -config "$csrconf" -out "$csr" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1316 fi |
| 1630 | 1317 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1318 if _isIP "$_csr_cn"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1319 ${ACME_OPENSSL_BIN:-openssl} req -new -sha256 -key "$csrkey" -subj "/O=$PROJECT_NAME" -config "$csrconf" -out "$csr" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1320 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1321 ${ACME_OPENSSL_BIN:-openssl} req -new -sha256 -key "$csrkey" -subj "/CN=$_csr_cn" -config "$csrconf" -out "$csr" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1322 fi |
| 1630 | 1323 fi |
| 1324 } | |
| 1325 | |
| 1326 #_signcsr key csr conf cert | |
| 1327 _signcsr() { | |
| 1328 key="$1" | |
| 1329 csr="$2" | |
| 1330 conf="$3" | |
| 1331 cert="$4" | |
| 1332 _debug "_signcsr" | |
| 1333 | |
| 1334 _msg="$(${ACME_OPENSSL_BIN:-openssl} x509 -req -days 365 -in "$csr" -signkey "$key" -extensions v3_req -extfile "$conf" -out "$cert" 2>&1)" | |
| 1335 _ret="$?" | |
| 1336 _debug "$_msg" | |
| 1337 return $_ret | |
| 1338 } | |
| 1339 | |
| 1340 #_csrfile | |
| 1341 _readSubjectFromCSR() { | |
| 1342 _csrfile="$1" | |
| 1343 if [ -z "$_csrfile" ]; then | |
| 1344 _usage "_readSubjectFromCSR mycsr.csr" | |
| 1345 return 1 | |
| 1346 fi | |
| 1347 ${ACME_OPENSSL_BIN:-openssl} req -noout -in "$_csrfile" -subject | tr ',' "\n" | _egrep_o "CN *=.*" | cut -d = -f 2 | cut -d / -f 1 | tr -d ' \n' | |
| 1348 } | |
| 1349 | |
| 1350 #_csrfile | |
| 1351 #echo comma separated domain list | |
| 1352 _readSubjectAltNamesFromCSR() { | |
| 1353 _csrfile="$1" | |
| 1354 if [ -z "$_csrfile" ]; then | |
| 1355 _usage "_readSubjectAltNamesFromCSR mycsr.csr" | |
| 1356 return 1 | |
| 1357 fi | |
| 1358 | |
| 1359 _csrsubj="$(_readSubjectFromCSR "$_csrfile")" | |
| 1360 _debug _csrsubj "$_csrsubj" | |
| 1361 | |
| 1362 _dnsAltnames="$(${ACME_OPENSSL_BIN:-openssl} req -noout -text -in "$_csrfile" | grep "^ *DNS:.*" | tr -d ' \n')" | |
| 1363 _debug _dnsAltnames "$_dnsAltnames" | |
| 1364 | |
| 1365 if _contains "$_dnsAltnames," "DNS:$_csrsubj,"; then | |
| 1366 _debug "AltNames contains subject" | |
| 1367 _excapedAlgnames="$(echo "$_dnsAltnames" | tr '*' '#')" | |
| 1368 _debug _excapedAlgnames "$_excapedAlgnames" | |
| 1369 _escapedSubject="$(echo "$_csrsubj" | tr '*' '#')" | |
| 1370 _debug _escapedSubject "$_escapedSubject" | |
| 1371 _dnsAltnames="$(echo "$_excapedAlgnames," | sed "s/DNS:$_escapedSubject,//g" | tr '#' '*' | sed "s/,\$//g")" | |
| 1372 _debug _dnsAltnames "$_dnsAltnames" | |
| 1373 else | |
| 1374 _debug "AltNames doesn't contain subject" | |
| 1375 fi | |
| 1376 | |
| 1377 echo "$_dnsAltnames" | sed "s/DNS://g" | |
| 1378 } | |
| 1379 | |
| 1380 #_csrfile | |
| 1381 _readKeyLengthFromCSR() { | |
| 1382 _csrfile="$1" | |
| 1383 if [ -z "$_csrfile" ]; then | |
| 1384 _usage "_readKeyLengthFromCSR mycsr.csr" | |
| 1385 return 1 | |
| 1386 fi | |
| 1387 | |
| 1388 _outcsr="$(${ACME_OPENSSL_BIN:-openssl} req -noout -text -in "$_csrfile")" | |
| 1389 _debug2 _outcsr "$_outcsr" | |
| 1390 if _contains "$_outcsr" "Public Key Algorithm: id-ecPublicKey"; then | |
| 1391 _debug "ECC CSR" | |
| 1392 echo "$_outcsr" | tr "\t" " " | _egrep_o "^ *ASN1 OID:.*" | cut -d ':' -f 2 | tr -d ' ' | |
| 1393 else | |
| 1394 _debug "RSA CSR" | |
| 1395 _rkl="$(echo "$_outcsr" | tr "\t" " " | _egrep_o "^ *Public.Key:.*" | cut -d '(' -f 2 | cut -d ' ' -f 1)" | |
| 1396 if [ "$_rkl" ]; then | |
| 1397 echo "$_rkl" | |
| 1398 else | |
| 1399 echo "$_outcsr" | tr "\t" " " | _egrep_o "RSA Public.Key:.*" | cut -d '(' -f 2 | cut -d ' ' -f 1 | |
| 1400 fi | |
| 1401 fi | |
| 1402 } | |
| 1403 | |
| 1404 _ss() { | |
| 1405 _port="$1" | |
| 1406 | |
| 1407 if _exists "ss"; then | |
| 1408 _debug "Using: ss" | |
| 1409 ss -ntpl 2>/dev/null | grep ":$_port " | |
| 1410 return 0 | |
| 1411 fi | |
| 1412 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1413 if [ "$(uname)" = "AIX" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1414 _debug "Using: AIX netstat" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1415 netstat -an | grep "^tcp" | grep "LISTEN" | grep "\.$_port " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1416 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1417 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1418 |
| 1630 | 1419 if _exists "netstat"; then |
| 1420 _debug "Using: netstat" | |
| 1421 if netstat -help 2>&1 | grep "\-p proto" >/dev/null; then | |
| 1422 #for windows version netstat tool | |
| 1423 netstat -an -p tcp | grep "LISTENING" | grep ":$_port " | |
| 1424 else | |
| 1425 if netstat -help 2>&1 | grep "\-p protocol" >/dev/null; then | |
| 1426 netstat -an -p tcp | grep LISTEN | grep ":$_port " | |
| 1427 elif netstat -help 2>&1 | grep -- '-P protocol' >/dev/null; then | |
| 1428 #for solaris | |
| 1429 netstat -an -P tcp | grep "\.$_port " | grep "LISTEN" | |
| 1430 elif netstat -help 2>&1 | grep "\-p" >/dev/null; then | |
| 1431 #for full linux | |
| 1432 netstat -ntpl | grep ":$_port " | |
| 1433 else | |
| 1434 #for busybox (embedded linux; no pid support) | |
| 1435 netstat -ntl 2>/dev/null | grep ":$_port " | |
| 1436 fi | |
| 1437 fi | |
| 1438 return 0 | |
| 1439 fi | |
| 1440 | |
| 1441 return 1 | |
| 1442 } | |
| 1443 | |
| 1444 #outfile key cert cacert [password [name [caname]]] | |
| 1445 _toPkcs() { | |
| 1446 _cpfx="$1" | |
| 1447 _ckey="$2" | |
| 1448 _ccert="$3" | |
| 1449 _cca="$4" | |
| 1450 pfxPassword="$5" | |
| 1451 pfxName="$6" | |
| 1452 pfxCaname="$7" | |
| 1453 | |
| 1454 if [ "$pfxCaname" ]; then | |
| 1455 ${ACME_OPENSSL_BIN:-openssl} pkcs12 -export -out "$_cpfx" -inkey "$_ckey" -in "$_ccert" -certfile "$_cca" -password "pass:$pfxPassword" -name "$pfxName" -caname "$pfxCaname" | |
| 1456 elif [ "$pfxName" ]; then | |
| 1457 ${ACME_OPENSSL_BIN:-openssl} pkcs12 -export -out "$_cpfx" -inkey "$_ckey" -in "$_ccert" -certfile "$_cca" -password "pass:$pfxPassword" -name "$pfxName" | |
| 1458 elif [ "$pfxPassword" ]; then | |
| 1459 ${ACME_OPENSSL_BIN:-openssl} pkcs12 -export -out "$_cpfx" -inkey "$_ckey" -in "$_ccert" -certfile "$_cca" -password "pass:$pfxPassword" | |
| 1460 else | |
| 1461 ${ACME_OPENSSL_BIN:-openssl} pkcs12 -export -out "$_cpfx" -inkey "$_ckey" -in "$_ccert" -certfile "$_cca" | |
| 1462 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1463 if [ "$?" = "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1464 _savedomainconf "Le_PFXPassword" "$pfxPassword" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1465 fi |
| 1630 | 1466 |
| 1467 } | |
| 1468 | |
| 1469 #domain [password] [isEcc] | |
| 1470 toPkcs() { | |
| 1471 domain="$1" | |
| 1472 pfxPassword="$2" | |
| 1473 if [ -z "$domain" ]; then | |
| 1474 _usage "Usage: $PROJECT_ENTRY --to-pkcs12 --domain <domain.tld> [--password <password>] [--ecc]" | |
| 1475 return 1 | |
| 1476 fi | |
| 1477 | |
| 1478 _isEcc="$3" | |
| 1479 | |
| 1480 _initpath "$domain" "$_isEcc" | |
| 1481 | |
| 1482 _toPkcs "$CERT_PFX_PATH" "$CERT_KEY_PATH" "$CERT_PATH" "$CA_CERT_PATH" "$pfxPassword" | |
| 1483 | |
| 1484 if [ "$?" = "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1485 _info "Success, PFX has been exported to: $CERT_PFX_PATH" |
| 1630 | 1486 fi |
| 1487 | |
| 1488 } | |
| 1489 | |
| 1490 #domain [isEcc] | |
| 1491 toPkcs8() { | |
| 1492 domain="$1" | |
| 1493 | |
| 1494 if [ -z "$domain" ]; then | |
| 1495 _usage "Usage: $PROJECT_ENTRY --to-pkcs8 --domain <domain.tld> [--ecc]" | |
| 1496 return 1 | |
| 1497 fi | |
| 1498 | |
| 1499 _isEcc="$2" | |
| 1500 | |
| 1501 _initpath "$domain" "$_isEcc" | |
| 1502 | |
| 1503 ${ACME_OPENSSL_BIN:-openssl} pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in "$CERT_KEY_PATH" -out "$CERT_PKCS8_PATH" | |
| 1504 | |
| 1505 if [ "$?" = "0" ]; then | |
| 1506 _info "Success, $CERT_PKCS8_PATH" | |
| 1507 fi | |
| 1508 | |
| 1509 } | |
| 1510 | |
| 1511 #[2048] | |
| 1512 createAccountKey() { | |
| 1513 _info "Creating account key" | |
| 1514 if [ -z "$1" ]; then | |
| 1515 _usage "Usage: $PROJECT_ENTRY --create-account-key [--accountkeylength <bits>]" | |
| 1516 return | |
| 1517 fi | |
| 1518 | |
| 1519 length=$1 | |
| 1520 _create_account_key "$length" | |
| 1521 | |
| 1522 } | |
| 1523 | |
| 1524 _create_account_key() { | |
| 1525 | |
| 1526 length=$1 | |
| 1527 | |
| 1528 if [ -z "$length" ] || [ "$length" = "$NO_VALUE" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1529 _debug "Using default length $DEFAULT_ACCOUNT_KEY_LENGTH" |
| 1630 | 1530 length="$DEFAULT_ACCOUNT_KEY_LENGTH" |
| 1531 fi | |
| 1532 | |
| 1533 _debug length "$length" | |
| 1534 _initpath | |
| 1535 | |
| 1536 mkdir -p "$CA_DIR" | |
| 1537 if [ -s "$ACCOUNT_KEY_PATH" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1538 _info "Account key exists, skipping" |
| 1630 | 1539 return 0 |
| 1540 else | |
| 1541 #generate account key | |
| 1542 if _createkey "$length" "$ACCOUNT_KEY_PATH"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1543 _info "Account key creation OK." |
| 1630 | 1544 return 0 |
| 1545 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1546 _err "Account key creation error." |
| 1630 | 1547 return 1 |
| 1548 fi | |
| 1549 fi | |
| 1550 | |
| 1551 } | |
| 1552 | |
| 1553 #domain [length] | |
| 1554 createDomainKey() { | |
| 1555 _info "Creating domain key" | |
| 1556 if [ -z "$1" ]; then | |
| 1557 _usage "Usage: $PROJECT_ENTRY --create-domain-key --domain <domain.tld> [--keylength <bits>]" | |
| 1558 return | |
| 1559 fi | |
| 1560 | |
| 1561 domain=$1 | |
| 1562 _cdl=$2 | |
| 1563 | |
| 1564 if [ -z "$_cdl" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1565 _debug "Using DEFAULT_DOMAIN_KEY_LENGTH=$DEFAULT_DOMAIN_KEY_LENGTH" |
| 1630 | 1566 _cdl="$DEFAULT_DOMAIN_KEY_LENGTH" |
| 1567 fi | |
| 1568 | |
| 1569 _initpath "$domain" "$_cdl" | |
| 1570 | |
| 1571 if [ ! -f "$CERT_KEY_PATH" ] || [ ! -s "$CERT_KEY_PATH" ] || ([ "$FORCE" ] && ! [ "$_ACME_IS_RENEW" ]) || [ "$Le_ForceNewDomainKey" = "1" ]; then | |
| 1572 if _createkey "$_cdl" "$CERT_KEY_PATH"; then | |
| 1573 _savedomainconf Le_Keylength "$_cdl" | |
| 1574 _info "The domain key is here: $(__green $CERT_KEY_PATH)" | |
| 1575 return 0 | |
| 1576 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1577 _err "Cannot create domain key" |
| 1630 | 1578 return 1 |
| 1579 fi | |
| 1580 else | |
| 1581 if [ "$_ACME_IS_RENEW" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1582 _info "Domain key exists, skipping" |
| 1630 | 1583 return 0 |
| 1584 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1585 _err "Domain key exists, do you want to overwrite it?" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1586 _err "If so, add '--force' and try again." |
| 1630 | 1587 return 1 |
| 1588 fi | |
| 1589 fi | |
| 1590 | |
| 1591 } | |
| 1592 | |
| 1593 # domain domainlist isEcc | |
| 1594 createCSR() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1595 _info "Creating CSR" |
| 1630 | 1596 if [ -z "$1" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1597 _usage "Usage: $PROJECT_ENTRY --create-csr --domain <domain.tld> [--domain <domain2.tld> ...] [--ecc]" |
| 1630 | 1598 return |
| 1599 fi | |
| 1600 | |
| 1601 domain="$1" | |
| 1602 domainlist="$2" | |
| 1603 _isEcc="$3" | |
| 1604 | |
| 1605 _initpath "$domain" "$_isEcc" | |
| 1606 | |
| 1607 if [ -f "$CSR_PATH" ] && [ "$_ACME_IS_RENEW" ] && [ -z "$FORCE" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1608 _info "CSR exists, skipping" |
| 1630 | 1609 return |
| 1610 fi | |
| 1611 | |
| 1612 if [ ! -f "$CERT_KEY_PATH" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1613 _err "This key file was not found: $CERT_KEY_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1614 _err "Please create it first." |
| 1630 | 1615 return 1 |
| 1616 fi | |
| 1617 _createcsr "$domain" "$domainlist" "$CERT_KEY_PATH" "$CSR_PATH" "$DOMAIN_SSL_CONF" | |
| 1618 | |
| 1619 } | |
| 1620 | |
| 1621 _url_replace() { | |
| 1622 tr '/+' '_-' | tr -d '= ' | |
| 1623 } | |
| 1624 | |
| 1625 #base64 string | |
| 1626 _durl_replace_base64() { | |
| 1627 _l=$((${#1} % 4)) | |
| 1628 if [ $_l -eq 2 ]; then | |
| 1629 _s="$1"'==' | |
| 1630 elif [ $_l -eq 3 ]; then | |
| 1631 _s="$1"'=' | |
| 1632 else | |
| 1633 _s="$1" | |
| 1634 fi | |
| 1635 echo "$_s" | tr '_-' '/+' | |
| 1636 } | |
| 1637 | |
| 1638 _time2str() { | |
| 1639 #BSD | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1640 if date -u -r "$1" -j "+%Y-%m-%dT%H:%M:%SZ" 2>/dev/null; then |
| 1630 | 1641 return |
| 1642 fi | |
| 1643 | |
| 1644 #Linux | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1645 if date -u --date=@"$1" "+%Y-%m-%dT%H:%M:%SZ" 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1646 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1647 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1648 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1649 #Omnios |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1650 if date -u -r "$1" +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null; then |
| 1630 | 1651 return |
| 1652 fi | |
| 1653 | |
| 1654 #Solaris | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1655 if printf "%(%Y-%m-%dT%H:%M:%SZ)T\n" $1 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1656 return |
| 1630 | 1657 fi |
| 1658 | |
| 1659 #Busybox | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1660 if echo "$1" | awk '{ print strftime("%Y-%m-%dT%H:%M:%SZ", $0); }' 2>/dev/null; then |
| 1630 | 1661 return |
| 1662 fi | |
| 1663 } | |
| 1664 | |
| 1665 _normalizeJson() { | |
| 1666 sed "s/\" *: *\([\"{\[]\)/\":\1/g" | sed "s/^ *\([^ ]\)/\1/" | tr -d "\r\n" | |
| 1667 } | |
| 1668 | |
| 1669 _stat() { | |
| 1670 #Linux | |
| 1671 if stat -c '%U:%G' "$1" 2>/dev/null; then | |
| 1672 return | |
| 1673 fi | |
| 1674 | |
| 1675 #BSD | |
| 1676 if stat -f '%Su:%Sg' "$1" 2>/dev/null; then | |
| 1677 return | |
| 1678 fi | |
| 1679 | |
| 1680 return 1 #error, 'stat' not found | |
| 1681 } | |
| 1682 | |
| 1683 #keyfile | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1684 _isRSA() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1685 keyfile=$1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1686 if grep "BEGIN RSA PRIVATE KEY" "$keyfile" >/dev/null 2>&1 || ${ACME_OPENSSL_BIN:-openssl} rsa -in "$keyfile" -noout -text 2>&1 | grep "^publicExponent:" 2>&1 >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1687 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1688 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1689 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1690 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1691 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1692 #keyfile |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1693 _isEcc() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1694 keyfile=$1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1695 if grep "BEGIN EC PRIVATE KEY" "$keyfile" >/dev/null 2>&1 || ${ACME_OPENSSL_BIN:-openssl} ec -in "$keyfile" -noout -text 2>/dev/null | grep "^NIST CURVE:" 2>&1 >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1696 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1697 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1698 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1699 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1700 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1701 #keyfile |
| 1630 | 1702 _calcjwk() { |
| 1703 keyfile="$1" | |
| 1704 if [ -z "$keyfile" ]; then | |
| 1705 _usage "Usage: _calcjwk keyfile" | |
| 1706 return 1 | |
| 1707 fi | |
| 1708 | |
| 1709 if [ "$JWK_HEADER" ] && [ "$__CACHED_JWK_KEY_FILE" = "$keyfile" ]; then | |
| 1710 _debug2 "Use cached jwk for file: $__CACHED_JWK_KEY_FILE" | |
| 1711 return 0 | |
| 1712 fi | |
| 1713 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1714 if _isRSA "$keyfile"; then |
| 1630 | 1715 _debug "RSA key" |
| 1716 pub_exp=$(${ACME_OPENSSL_BIN:-openssl} rsa -in "$keyfile" -noout -text | grep "^publicExponent:" | cut -d '(' -f 2 | cut -d 'x' -f 2 | cut -d ')' -f 1) | |
| 1717 if [ "${#pub_exp}" = "5" ]; then | |
| 1718 pub_exp=0$pub_exp | |
| 1719 fi | |
| 1720 _debug3 pub_exp "$pub_exp" | |
| 1721 | |
| 1722 e=$(echo "$pub_exp" | _h2b | _base64) | |
| 1723 _debug3 e "$e" | |
| 1724 | |
| 1725 modulus=$(${ACME_OPENSSL_BIN:-openssl} rsa -in "$keyfile" -modulus -noout | cut -d '=' -f 2) | |
| 1726 _debug3 modulus "$modulus" | |
| 1727 n="$(printf "%s" "$modulus" | _h2b | _base64 | _url_replace)" | |
| 1728 _debug3 n "$n" | |
| 1729 | |
| 1730 jwk='{"e": "'$e'", "kty": "RSA", "n": "'$n'"}' | |
| 1731 _debug3 jwk "$jwk" | |
| 1732 | |
| 1733 JWK_HEADER='{"alg": "RS256", "jwk": '$jwk'}' | |
| 1734 JWK_HEADERPLACE_PART1='{"nonce": "' | |
| 1735 JWK_HEADERPLACE_PART2='", "alg": "RS256"' | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1736 elif _isEcc "$keyfile"; then |
| 1630 | 1737 _debug "EC key" |
| 1738 crv="$(${ACME_OPENSSL_BIN:-openssl} ec -in "$keyfile" -noout -text 2>/dev/null | grep "^NIST CURVE:" | cut -d ":" -f 2 | tr -d " \r\n")" | |
| 1739 _debug3 crv "$crv" | |
| 1740 __ECC_KEY_LEN=$(echo "$crv" | cut -d "-" -f 2) | |
| 1741 if [ "$__ECC_KEY_LEN" = "521" ]; then | |
| 1742 __ECC_KEY_LEN=512 | |
| 1743 fi | |
| 1744 _debug3 __ECC_KEY_LEN "$__ECC_KEY_LEN" | |
| 1745 if [ -z "$crv" ]; then | |
| 1746 _debug "Let's try ASN1 OID" | |
| 1747 crv_oid="$(${ACME_OPENSSL_BIN:-openssl} ec -in "$keyfile" -noout -text 2>/dev/null | grep "^ASN1 OID:" | cut -d ":" -f 2 | tr -d " \r\n")" | |
| 1748 _debug3 crv_oid "$crv_oid" | |
| 1749 case "${crv_oid}" in | |
| 1750 "prime256v1") | |
| 1751 crv="P-256" | |
| 1752 __ECC_KEY_LEN=256 | |
| 1753 ;; | |
| 1754 "secp384r1") | |
| 1755 crv="P-384" | |
| 1756 __ECC_KEY_LEN=384 | |
| 1757 ;; | |
| 1758 "secp521r1") | |
| 1759 crv="P-521" | |
| 1760 __ECC_KEY_LEN=512 | |
| 1761 ;; | |
| 1762 *) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1763 _err "ECC oid: $crv_oid" |
| 1630 | 1764 return 1 |
| 1765 ;; | |
| 1766 esac | |
| 1767 _debug3 crv "$crv" | |
| 1768 fi | |
| 1769 | |
| 1770 pubi="$(${ACME_OPENSSL_BIN:-openssl} ec -in "$keyfile" -noout -text 2>/dev/null | grep -n pub: | cut -d : -f 1)" | |
| 1771 pubi=$(_math "$pubi" + 1) | |
| 1772 _debug3 pubi "$pubi" | |
| 1773 | |
| 1774 pubj="$(${ACME_OPENSSL_BIN:-openssl} ec -in "$keyfile" -noout -text 2>/dev/null | grep -n "ASN1 OID:" | cut -d : -f 1)" | |
| 1775 pubj=$(_math "$pubj" - 1) | |
| 1776 _debug3 pubj "$pubj" | |
| 1777 | |
| 1778 pubtext="$(${ACME_OPENSSL_BIN:-openssl} ec -in "$keyfile" -noout -text 2>/dev/null | sed -n "$pubi,${pubj}p" | tr -d " \n\r")" | |
| 1779 _debug3 pubtext "$pubtext" | |
| 1780 | |
| 1781 xlen="$(printf "%s" "$pubtext" | tr -d ':' | wc -c)" | |
| 1782 xlen=$(_math "$xlen" / 4) | |
| 1783 _debug3 xlen "$xlen" | |
| 1784 | |
| 1785 xend=$(_math "$xlen" + 1) | |
| 1786 x="$(printf "%s" "$pubtext" | cut -d : -f 2-"$xend")" | |
| 1787 _debug3 x "$x" | |
| 1788 | |
| 1789 x64="$(printf "%s" "$x" | tr -d : | _h2b | _base64 | _url_replace)" | |
| 1790 _debug3 x64 "$x64" | |
| 1791 | |
| 1792 xend=$(_math "$xend" + 1) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1793 y="$(printf "%s" "$pubtext" | cut -d : -f "$xend"-2048)" |
| 1630 | 1794 _debug3 y "$y" |
| 1795 | |
| 1796 y64="$(printf "%s" "$y" | tr -d : | _h2b | _base64 | _url_replace)" | |
| 1797 _debug3 y64 "$y64" | |
| 1798 | |
| 1799 jwk='{"crv": "'$crv'", "kty": "EC", "x": "'$x64'", "y": "'$y64'"}' | |
| 1800 _debug3 jwk "$jwk" | |
| 1801 | |
| 1802 JWK_HEADER='{"alg": "ES'$__ECC_KEY_LEN'", "jwk": '$jwk'}' | |
| 1803 JWK_HEADERPLACE_PART1='{"nonce": "' | |
| 1804 JWK_HEADERPLACE_PART2='", "alg": "ES'$__ECC_KEY_LEN'"' | |
| 1805 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1806 _err "Only RSA or EC keys are supported. keyfile=$keyfile" |
| 1630 | 1807 _debug2 "$(cat "$keyfile")" |
| 1808 return 1 | |
| 1809 fi | |
| 1810 | |
| 1811 _debug3 JWK_HEADER "$JWK_HEADER" | |
| 1812 __CACHED_JWK_KEY_FILE="$keyfile" | |
| 1813 } | |
| 1814 | |
| 1815 _time() { | |
| 1816 date -u "+%s" | |
| 1817 } | |
| 1818 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1819 #support 2 formats: |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1820 # 2022-04-01 08:10:33 to 1648800633 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1821 #or 2022-04-01T08:10:33Z to 1648800633 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1822 _date2time() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1823 #Mac/BSD |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1824 if date -u -j -f "%Y-%m-%d %H:%M:%S" "$(echo "$1" | tr -d "Z" | tr "T" ' ')" +"%s" 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1825 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1826 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1827 #Linux |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1828 if date -u -d "$(echo "$1" | tr -d "Z" | tr "T" ' ')" +"%s" 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1829 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1830 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1831 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1832 #Solaris |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1833 if gdate -u -d "$(echo "$1" | tr -d "Z" | tr "T" ' ')" +"%s" 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1834 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1835 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1836 #Omnios |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1837 if python3 -c "import datetime; print(int(datetime.datetime.strptime(\"$1\", \"%Y-%m-%d %H:%M:%S\").replace(tzinfo=datetime.timezone.utc).timestamp()))" 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1838 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1839 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1840 #Omnios |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1841 if python3 -c "import datetime; print(int(datetime.datetime.strptime(\"$1\", \"%Y-%m-%dT%H:%M:%SZ\").replace(tzinfo=datetime.timezone.utc).timestamp()))" 2>/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1842 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1843 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1844 _err "Cannot parse _date2time $1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1845 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1846 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1847 |
| 1630 | 1848 _utc_date() { |
| 1849 date -u "+%Y-%m-%d %H:%M:%S" | |
| 1850 } | |
| 1851 | |
| 1852 _mktemp() { | |
| 1853 if _exists mktemp; then | |
| 1854 if mktemp 2>/dev/null; then | |
| 1855 return 0 | |
| 1856 elif _contains "$(mktemp 2>&1)" "-t prefix" && mktemp -t "$PROJECT_NAME" 2>/dev/null; then | |
| 1857 #for Mac osx | |
| 1858 return 0 | |
| 1859 fi | |
| 1860 fi | |
| 1861 if [ -d "/tmp" ]; then | |
| 1862 echo "/tmp/${PROJECT_NAME}wefADf24sf.$(_time).tmp" | |
| 1863 return 0 | |
| 1864 elif [ "$LE_TEMP_DIR" ] && mkdir -p "$LE_TEMP_DIR"; then | |
| 1865 echo "/$LE_TEMP_DIR/wefADf24sf.$(_time).tmp" | |
| 1866 return 0 | |
| 1867 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1868 _err "Cannot create temp file." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1869 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1870 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1871 #clear all the https envs to cause _inithttp() to run next time. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1872 _resethttp() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1873 __HTTP_INITIALIZED="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1874 _ACME_CURL="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1875 _ACME_WGET="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1876 ACME_HTTP_NO_REDIRECTS="" |
| 1630 | 1877 } |
| 1878 | |
| 1879 _inithttp() { | |
| 1880 | |
| 1881 if [ -z "$HTTP_HEADER" ] || ! touch "$HTTP_HEADER"; then | |
| 1882 HTTP_HEADER="$(_mktemp)" | |
| 1883 _debug2 HTTP_HEADER "$HTTP_HEADER" | |
| 1884 fi | |
| 1885 | |
| 1886 if [ "$__HTTP_INITIALIZED" ]; then | |
| 1887 if [ "$_ACME_CURL$_ACME_WGET" ]; then | |
| 1888 _debug2 "Http already initialized." | |
| 1889 return 0 | |
| 1890 fi | |
| 1891 fi | |
| 1892 | |
| 1893 if [ -z "$_ACME_CURL" ] && _exists "curl"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1894 _ACME_CURL="curl --silent --dump-header $HTTP_HEADER " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1895 if [ -z "$ACME_HTTP_NO_REDIRECTS" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1896 _ACME_CURL="$_ACME_CURL -L " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1897 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1898 if [ "$DEBUG" ] && [ "$DEBUG" -ge 2 ]; then |
| 1630 | 1899 _CURL_DUMP="$(_mktemp)" |
| 1900 _ACME_CURL="$_ACME_CURL --trace-ascii $_CURL_DUMP " | |
| 1901 fi | |
| 1902 | |
| 1903 if [ "$CA_PATH" ]; then | |
| 1904 _ACME_CURL="$_ACME_CURL --capath $CA_PATH " | |
| 1905 elif [ "$CA_BUNDLE" ]; then | |
| 1906 _ACME_CURL="$_ACME_CURL --cacert $CA_BUNDLE " | |
| 1907 fi | |
| 1908 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1909 if _contains "$(curl --help 2>&1)" "--globoff" || _contains "$(curl --help curl 2>&1)" "--globoff"; then |
| 1630 | 1910 _ACME_CURL="$_ACME_CURL -g " |
| 1911 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1912 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1913 #don't use --fail-with-body |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1914 ##from curl 7.76: return fail on HTTP errors but keep the body |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1915 #if _contains "$(curl --help http 2>&1)" "--fail-with-body"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1916 # _ACME_CURL="$_ACME_CURL --fail-with-body " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1917 #fi |
| 1630 | 1918 fi |
| 1919 | |
| 1920 if [ -z "$_ACME_WGET" ] && _exists "wget"; then | |
| 1921 _ACME_WGET="wget -q" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1922 if [ "$ACME_HTTP_NO_REDIRECTS" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1923 _ACME_WGET="$_ACME_WGET --max-redirect 0 " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1924 fi |
| 1630 | 1925 if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1926 if [ "$_ACME_WGET" ] && _contains "$($_ACME_WGET --help 2>&1)" "--debug"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1927 _ACME_WGET="$_ACME_WGET -d " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1928 fi |
| 1630 | 1929 fi |
| 1930 if [ "$CA_PATH" ]; then | |
| 1931 _ACME_WGET="$_ACME_WGET --ca-directory=$CA_PATH " | |
| 1932 elif [ "$CA_BUNDLE" ]; then | |
| 1933 _ACME_WGET="$_ACME_WGET --ca-certificate=$CA_BUNDLE " | |
| 1934 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1935 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1936 #from wget 1.14: do not skip body on 404 error |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1937 if _contains "$(wget --help 2>&1)" "--content-on-error"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1938 _ACME_WGET="$_ACME_WGET --content-on-error " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
1939 fi |
| 1630 | 1940 fi |
| 1941 | |
| 1942 __HTTP_INITIALIZED=1 | |
| 1943 | |
| 1944 } | |
| 1945 | |
| 1946 # body url [needbase64] [POST|PUT|DELETE] [ContentType] | |
| 1947 _post() { | |
| 1948 body="$1" | |
| 1949 _post_url="$2" | |
| 1950 needbase64="$3" | |
| 1951 httpmethod="$4" | |
| 1952 _postContentType="$5" | |
| 1953 | |
| 1954 if [ -z "$httpmethod" ]; then | |
| 1955 httpmethod="POST" | |
| 1956 fi | |
| 1957 _debug $httpmethod | |
| 1958 _debug "_post_url" "$_post_url" | |
| 1959 _debug2 "body" "$body" | |
| 1960 _debug2 "_postContentType" "$_postContentType" | |
| 1961 | |
| 1962 _inithttp | |
| 1963 | |
| 1964 if [ "$_ACME_CURL" ] && [ "${ACME_USE_WGET:-0}" = "0" ]; then | |
| 1965 _CURL="$_ACME_CURL" | |
| 1966 if [ "$HTTPS_INSECURE" ]; then | |
| 1967 _CURL="$_CURL --insecure " | |
| 1968 fi | |
| 1969 if [ "$httpmethod" = "HEAD" ]; then | |
| 1970 _CURL="$_CURL -I " | |
| 1971 fi | |
| 1972 _debug "_CURL" "$_CURL" | |
| 1973 if [ "$needbase64" ]; then | |
| 1974 if [ "$body" ]; then | |
| 1975 if [ "$_postContentType" ]; then | |
| 1976 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "Content-Type: $_postContentType" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url" | _base64)" | |
| 1977 else | |
| 1978 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url" | _base64)" | |
| 1979 fi | |
| 1980 else | |
| 1981 if [ "$_postContentType" ]; then | |
| 1982 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "Content-Type: $_postContentType" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" "$_post_url" | _base64)" | |
| 1983 else | |
| 1984 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" "$_post_url" | _base64)" | |
| 1985 fi | |
| 1986 fi | |
| 1987 else | |
| 1988 if [ "$body" ]; then | |
| 1989 if [ "$_postContentType" ]; then | |
| 1990 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "Content-Type: $_postContentType" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url")" | |
| 1991 else | |
| 1992 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url")" | |
| 1993 fi | |
| 1994 else | |
| 1995 if [ "$_postContentType" ]; then | |
| 1996 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "Content-Type: $_postContentType" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" "$_post_url")" | |
| 1997 else | |
| 1998 response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" "$_post_url")" | |
| 1999 fi | |
| 2000 fi | |
| 2001 fi | |
| 2002 _ret="$?" | |
| 2003 if [ "$_ret" != "0" ]; then | |
| 2004 _err "Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: $_ret" | |
| 2005 if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ]; then | |
| 2006 _err "Here is the curl dump log:" | |
| 2007 _err "$(cat "$_CURL_DUMP")" | |
| 2008 fi | |
| 2009 fi | |
| 2010 elif [ "$_ACME_WGET" ]; then | |
| 2011 _WGET="$_ACME_WGET" | |
| 2012 if [ "$HTTPS_INSECURE" ]; then | |
| 2013 _WGET="$_WGET --no-check-certificate " | |
| 2014 fi | |
| 2015 if [ "$httpmethod" = "HEAD" ]; then | |
| 2016 _WGET="$_WGET --read-timeout=3.0 --tries=2 " | |
| 2017 fi | |
| 2018 _debug "_WGET" "$_WGET" | |
| 2019 if [ "$needbase64" ]; then | |
| 2020 if [ "$httpmethod" = "POST" ]; then | |
| 2021 if [ "$_postContentType" ]; then | |
| 2022 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" | |
| 2023 else | |
| 2024 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" | |
| 2025 fi | |
| 2026 else | |
| 2027 if [ "$_postContentType" ]; then | |
| 2028 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" | |
| 2029 else | |
| 2030 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" | |
| 2031 fi | |
| 2032 fi | |
| 2033 else | |
| 2034 if [ "$httpmethod" = "POST" ]; then | |
| 2035 if [ "$_postContentType" ]; then | |
| 2036 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER")" | |
| 2037 else | |
| 2038 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER")" | |
| 2039 fi | |
| 2040 elif [ "$httpmethod" = "HEAD" ]; then | |
| 2041 if [ "$_postContentType" ]; then | |
| 2042 response="$($_WGET --spider -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER")" | |
| 2043 else | |
| 2044 response="$($_WGET --spider -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER")" | |
| 2045 fi | |
| 2046 else | |
| 2047 if [ "$_postContentType" ]; then | |
| 2048 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER")" | |
| 2049 else | |
| 2050 response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER")" | |
| 2051 fi | |
| 2052 fi | |
| 2053 fi | |
| 2054 _ret="$?" | |
| 2055 if [ "$_ret" = "8" ]; then | |
| 2056 _ret=0 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2057 _debug "wget returned 8 as the server returned a 'Bad Request' response. Let's process the response later." |
| 1630 | 2058 fi |
| 2059 if [ "$_ret" != "0" ]; then | |
| 2060 _err "Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: $_ret" | |
| 2061 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2062 if _contains "$_WGET" " -d "; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2063 # Demultiplex wget debug output |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2064 cat "$HTTP_HEADER" >&2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2065 _sed_i '/^[^ ][^ ]/d; /^ *$/d' "$HTTP_HEADER" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2066 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2067 # remove leading whitespaces from header to match curl format |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2068 _sed_i 's/^ //g' "$HTTP_HEADER" |
| 1630 | 2069 else |
| 2070 _ret="$?" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2071 _err "Neither curl nor wget have been found, cannot make $httpmethod request." |
| 1630 | 2072 fi |
| 2073 _debug "_ret" "$_ret" | |
| 2074 printf "%s" "$response" | |
| 2075 return $_ret | |
| 2076 } | |
| 2077 | |
| 2078 # url getheader timeout | |
| 2079 _get() { | |
| 2080 _debug GET | |
| 2081 url="$1" | |
| 2082 onlyheader="$2" | |
| 2083 t="$3" | |
| 2084 _debug url "$url" | |
| 2085 _debug "timeout=$t" | |
| 2086 | |
| 2087 _inithttp | |
| 2088 | |
| 2089 if [ "$_ACME_CURL" ] && [ "${ACME_USE_WGET:-0}" = "0" ]; then | |
| 2090 _CURL="$_ACME_CURL" | |
| 2091 if [ "$HTTPS_INSECURE" ]; then | |
| 2092 _CURL="$_CURL --insecure " | |
| 2093 fi | |
| 2094 if [ "$t" ]; then | |
| 2095 _CURL="$_CURL --connect-timeout $t" | |
| 2096 fi | |
| 2097 _debug "_CURL" "$_CURL" | |
| 2098 if [ "$onlyheader" ]; then | |
| 2099 $_CURL -I --user-agent "$USER_AGENT" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" "$url" | |
| 2100 else | |
| 2101 $_CURL --user-agent "$USER_AGENT" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" "$url" | |
| 2102 fi | |
| 2103 ret=$? | |
| 2104 if [ "$ret" != "0" ]; then | |
| 2105 _err "Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: $ret" | |
| 2106 if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ]; then | |
| 2107 _err "Here is the curl dump log:" | |
| 2108 _err "$(cat "$_CURL_DUMP")" | |
| 2109 fi | |
| 2110 fi | |
| 2111 elif [ "$_ACME_WGET" ]; then | |
| 2112 _WGET="$_ACME_WGET" | |
| 2113 if [ "$HTTPS_INSECURE" ]; then | |
| 2114 _WGET="$_WGET --no-check-certificate " | |
| 2115 fi | |
| 2116 if [ "$t" ]; then | |
| 2117 _WGET="$_WGET --timeout=$t" | |
| 2118 fi | |
| 2119 _debug "_WGET" "$_WGET" | |
| 2120 if [ "$onlyheader" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2121 _wget_out="$($_WGET --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" -S -O /dev/null "$url" 2>&1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2122 if _contains "$_WGET" " -d "; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2123 # Demultiplex wget debug output |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2124 echo "$_wget_out" >&2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2125 echo "$_wget_out" | sed '/^[^ ][^ ]/d; /^ *$/d; s/^ //g' - |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2126 fi |
| 1630 | 2127 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2128 $_WGET --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" -S -O - "$url" 2>"$HTTP_HEADER" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2129 if _contains "$_WGET" " -d "; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2130 # Demultiplex wget debug output |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2131 cat "$HTTP_HEADER" >&2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2132 _sed_i '/^[^ ][^ ]/d; /^ *$/d' "$HTTP_HEADER" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2133 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2134 # remove leading whitespaces from header to match curl format |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2135 _sed_i 's/^ //g' "$HTTP_HEADER" |
| 1630 | 2136 fi |
| 2137 ret=$? | |
| 2138 if [ "$ret" = "8" ]; then | |
| 2139 ret=0 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2140 _debug "wget returned 8 as the server returned a 'Bad Request' response. Let's process the response later." |
| 1630 | 2141 fi |
| 2142 if [ "$ret" != "0" ]; then | |
| 2143 _err "Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: $ret" | |
| 2144 fi | |
| 2145 else | |
| 2146 ret=$? | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2147 _err "Neither curl nor wget have been found, cannot make GET request." |
| 1630 | 2148 fi |
| 2149 _debug "ret" "$ret" | |
| 2150 return $ret | |
| 2151 } | |
| 2152 | |
| 2153 _head_n() { | |
| 2154 head -n "$1" | |
| 2155 } | |
| 2156 | |
| 2157 _tail_n() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2158 if _is_solaris; then |
| 1630 | 2159 #fix for solaris |
| 2160 tail -"$1" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2161 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2162 tail -n "$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2163 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2164 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2165 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2166 _tail_c() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2167 tail -c "$1" 2>/dev/null || tail -"$1"c |
| 1630 | 2168 } |
| 2169 | |
| 2170 # url payload needbase64 keyfile | |
| 2171 _send_signed_request() { | |
| 2172 url=$1 | |
| 2173 payload=$2 | |
| 2174 needbase64=$3 | |
| 2175 keyfile=$4 | |
| 2176 if [ -z "$keyfile" ]; then | |
| 2177 keyfile="$ACCOUNT_KEY_PATH" | |
| 2178 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2179 _debug "=======Sending Signed Request=======" |
| 1630 | 2180 _debug url "$url" |
| 2181 _debug payload "$payload" | |
| 2182 | |
| 2183 if ! _calcjwk "$keyfile"; then | |
| 2184 return 1 | |
| 2185 fi | |
| 2186 | |
| 2187 __request_conent_type="$CONTENT_TYPE_JSON" | |
| 2188 | |
| 2189 payload64=$(printf "%s" "$payload" | _base64 | _url_replace) | |
| 2190 _debug3 payload64 "$payload64" | |
| 2191 | |
| 2192 MAX_REQUEST_RETRY_TIMES=20 | |
| 2193 _sleep_retry_sec=1 | |
| 2194 _request_retry_times=0 | |
| 2195 while [ "${_request_retry_times}" -lt "$MAX_REQUEST_RETRY_TIMES" ]; do | |
| 2196 _request_retry_times=$(_math "$_request_retry_times" + 1) | |
| 2197 _debug3 _request_retry_times "$_request_retry_times" | |
| 2198 if [ -z "$_CACHED_NONCE" ]; then | |
| 2199 _headers="" | |
| 2200 if [ "$ACME_NEW_NONCE" ]; then | |
| 2201 _debug2 "Get nonce with HEAD. ACME_NEW_NONCE" "$ACME_NEW_NONCE" | |
| 2202 nonceurl="$ACME_NEW_NONCE" | |
| 2203 if _post "" "$nonceurl" "" "HEAD" "$__request_conent_type" >/dev/null; then | |
| 2204 _headers="$(cat "$HTTP_HEADER")" | |
| 2205 _debug2 _headers "$_headers" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2206 _CACHED_NONCE="$(echo "$_headers" | grep -i "Replay-Nonce:" | _head_n 1 | tr -d "\r\n " | cut -d ':' -f 2 | cut -d , -f 1)" |
| 1630 | 2207 fi |
| 2208 fi | |
| 2209 if [ -z "$_CACHED_NONCE" ]; then | |
| 2210 _debug2 "Get nonce with GET. ACME_DIRECTORY" "$ACME_DIRECTORY" | |
| 2211 nonceurl="$ACME_DIRECTORY" | |
| 2212 _headers="$(_get "$nonceurl" "onlyheader")" | |
| 2213 _debug2 _headers "$_headers" | |
| 2214 _CACHED_NONCE="$(echo "$_headers" | grep -i "Replay-Nonce:" | _head_n 1 | tr -d "\r\n " | cut -d ':' -f 2)" | |
| 2215 fi | |
| 2216 if [ -z "$_CACHED_NONCE" ] && [ "$ACME_NEW_NONCE" ]; then | |
| 2217 _debug2 "Get nonce with GET. ACME_NEW_NONCE" "$ACME_NEW_NONCE" | |
| 2218 nonceurl="$ACME_NEW_NONCE" | |
| 2219 _headers="$(_get "$nonceurl" "onlyheader")" | |
| 2220 _debug2 _headers "$_headers" | |
| 2221 _CACHED_NONCE="$(echo "$_headers" | grep -i "Replay-Nonce:" | _head_n 1 | tr -d "\r\n " | cut -d ':' -f 2)" | |
| 2222 fi | |
| 2223 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2224 _err "Cannot connect to $nonceurl to get nonce." |
| 1630 | 2225 return 1 |
| 2226 fi | |
| 2227 else | |
| 2228 _debug2 "Use _CACHED_NONCE" "$_CACHED_NONCE" | |
| 2229 fi | |
| 2230 nonce="$_CACHED_NONCE" | |
| 2231 _debug2 nonce "$nonce" | |
| 2232 if [ -z "$nonce" ]; then | |
| 2233 _info "Could not get nonce, let's try again." | |
| 2234 _sleep 2 | |
| 2235 continue | |
| 2236 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2237 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2238 if [ "$url" = "$ACME_NEW_ACCOUNT" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2239 protected="$JWK_HEADERPLACE_PART1$nonce\", \"url\": \"${url}$JWK_HEADERPLACE_PART2, \"jwk\": $jwk"'}' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2240 elif [ "$url" = "$ACME_REVOKE_CERT" ] && [ "$keyfile" != "$ACCOUNT_KEY_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2241 protected="$JWK_HEADERPLACE_PART1$nonce\", \"url\": \"${url}$JWK_HEADERPLACE_PART2, \"jwk\": $jwk"'}' |
| 1630 | 2242 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2243 protected="$JWK_HEADERPLACE_PART1$nonce\", \"url\": \"${url}$JWK_HEADERPLACE_PART2, \"kid\": \"${ACCOUNT_URL}\""'}' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2244 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2245 |
| 1630 | 2246 _debug3 protected "$protected" |
| 2247 | |
| 2248 protected64="$(printf "%s" "$protected" | _base64 | _url_replace)" | |
| 2249 _debug3 protected64 "$protected64" | |
| 2250 | |
| 2251 if ! _sig_t="$(printf "%s" "$protected64.$payload64" | _sign "$keyfile" "sha256")"; then | |
| 2252 _err "Sign request failed." | |
| 2253 return 1 | |
| 2254 fi | |
| 2255 _debug3 _sig_t "$_sig_t" | |
| 2256 | |
| 2257 sig="$(printf "%s" "$_sig_t" | _url_replace)" | |
| 2258 _debug3 sig "$sig" | |
| 2259 | |
| 2260 body="{\"protected\": \"$protected64\", \"payload\": \"$payload64\", \"signature\": \"$sig\"}" | |
| 2261 _debug3 body "$body" | |
| 2262 | |
| 2263 response="$(_post "$body" "$url" "$needbase64" "POST" "$__request_conent_type")" | |
| 2264 _CACHED_NONCE="" | |
| 2265 | |
| 2266 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2267 _err "Cannot make POST request to $url" |
| 1630 | 2268 return 1 |
| 2269 fi | |
| 2270 | |
| 2271 responseHeaders="$(cat "$HTTP_HEADER")" | |
| 2272 _debug2 responseHeaders "$responseHeaders" | |
| 2273 | |
| 2274 code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" | |
| 2275 _debug code "$code" | |
| 2276 | |
| 2277 _debug2 original "$response" | |
| 2278 if echo "$responseHeaders" | grep -i "Content-Type: *application/json" >/dev/null 2>&1; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2279 response="$(echo "$response" | _json_decode | _normalizeJson)" |
| 1630 | 2280 fi |
| 2281 _debug2 response "$response" | |
| 2282 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2283 _CACHED_NONCE="$(echo "$responseHeaders" | grep -i "Replay-Nonce:" | _head_n 1 | tr -d "\r\n " | cut -d ':' -f 2 | cut -d , -f 1)" |
| 1630 | 2284 |
| 2285 if ! _startswith "$code" "2"; then | |
| 2286 _body="$response" | |
| 2287 if [ "$needbase64" ]; then | |
| 2288 _body="$(echo "$_body" | _dbase64 multiline)" | |
| 2289 _debug3 _body "$_body" | |
| 2290 fi | |
| 2291 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2292 _retryafter=$(echo "$responseHeaders" | grep -i "^Retry-After *: *[0-9]\+ *" | cut -d : -f 2 | tr -d ' ' | tr -d '\r') |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2293 if [ "$code" = '503' ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2294 _sleep_overload_retry_sec=$_retryafter |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2295 if [ -z "$_sleep_overload_retry_sec" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2296 _sleep_overload_retry_sec=5 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2297 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2298 if [ $_sleep_overload_retry_sec -le 600 ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2299 _info "It seems the CA server is currently overloaded, let's wait and retry. Sleeping for $_sleep_overload_retry_sec seconds." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2300 _sleep $_sleep_overload_retry_sec |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2301 continue |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2302 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2303 _info "The retryafter=$_retryafter value is too large (> 600), will not retry anymore." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2304 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2305 fi |
| 1630 | 2306 if _contains "$_body" "JWS has invalid anti-replay nonce" || _contains "$_body" "JWS has an invalid anti-replay nonce"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2307 _info "It seems the CA server is busy now, let's wait and retry. Sleeping for $_sleep_retry_sec seconds." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2308 _CACHED_NONCE="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2309 _sleep $_sleep_retry_sec |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2310 continue |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2311 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2312 if _contains "$_body" "The Replay Nonce is not recognized"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2313 _info "The replay nonce is not valid, let's get a new one. Sleeping for $_sleep_retry_sec seconds." |
| 1630 | 2314 _CACHED_NONCE="" |
| 2315 _sleep $_sleep_retry_sec | |
| 2316 continue | |
| 2317 fi | |
| 2318 fi | |
| 2319 return 0 | |
| 2320 done | |
| 2321 _info "Giving up sending to CA server after $MAX_REQUEST_RETRY_TIMES retries." | |
| 2322 return 1 | |
| 2323 | |
| 2324 } | |
| 2325 | |
| 2326 #setopt "file" "opt" "=" "value" [";"] | |
| 2327 _setopt() { | |
| 2328 __conf="$1" | |
| 2329 __opt="$2" | |
| 2330 __sep="$3" | |
| 2331 __val="$4" | |
| 2332 __end="$5" | |
| 2333 if [ -z "$__opt" ]; then | |
| 2334 _usage usage: _setopt '"file" "opt" "=" "value" [";"]' | |
| 2335 return | |
| 2336 fi | |
| 2337 if [ ! -f "$__conf" ]; then | |
| 2338 touch "$__conf" | |
| 2339 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2340 if [ -n "$(_tail_c 1 <"$__conf")" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2341 echo >>"$__conf" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2342 fi |
| 1630 | 2343 |
| 2344 if grep -n "^$__opt$__sep" "$__conf" >/dev/null; then | |
| 2345 _debug3 OK | |
| 2346 if _contains "$__val" "&"; then | |
| 2347 __val="$(echo "$__val" | sed 's/&/\\&/g')" | |
| 2348 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2349 if _contains "$__val" "|"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2350 __val="$(echo "$__val" | sed 's/|/\\|/g')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2351 fi |
| 1630 | 2352 text="$(cat "$__conf")" |
| 2353 printf -- "%s\n" "$text" | sed "s|^$__opt$__sep.*$|$__opt$__sep$__val$__end|" >"$__conf" | |
| 2354 | |
| 2355 elif grep -n "^#$__opt$__sep" "$__conf" >/dev/null; then | |
| 2356 if _contains "$__val" "&"; then | |
| 2357 __val="$(echo "$__val" | sed 's/&/\\&/g')" | |
| 2358 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2359 if _contains "$__val" "|"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2360 __val="$(echo "$__val" | sed 's/|/\\|/g')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2361 fi |
| 1630 | 2362 text="$(cat "$__conf")" |
| 2363 printf -- "%s\n" "$text" | sed "s|^#$__opt$__sep.*$|$__opt$__sep$__val$__end|" >"$__conf" | |
| 2364 | |
| 2365 else | |
| 2366 _debug3 APP | |
| 2367 echo "$__opt$__sep$__val$__end" >>"$__conf" | |
| 2368 fi | |
| 2369 _debug3 "$(grep -n "^$__opt$__sep" "$__conf")" | |
| 2370 } | |
| 2371 | |
| 2372 #_save_conf file key value base64encode | |
| 2373 #save to conf | |
| 2374 _save_conf() { | |
| 2375 _s_c_f="$1" | |
| 2376 _sdkey="$2" | |
| 2377 _sdvalue="$3" | |
| 2378 _b64encode="$4" | |
| 2379 if [ "$_sdvalue" ] && [ "$_b64encode" ]; then | |
| 2380 _sdvalue="${B64CONF_START}$(printf "%s" "${_sdvalue}" | _base64)${B64CONF_END}" | |
| 2381 fi | |
| 2382 if [ "$_s_c_f" ]; then | |
| 2383 _setopt "$_s_c_f" "$_sdkey" "=" "'$_sdvalue'" | |
| 2384 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2385 _err "Config file is empty, cannot save $_sdkey=$_sdvalue" |
| 1630 | 2386 fi |
| 2387 } | |
| 2388 | |
| 2389 #_clear_conf file key | |
| 2390 _clear_conf() { | |
| 2391 _c_c_f="$1" | |
| 2392 _sdkey="$2" | |
| 2393 if [ "$_c_c_f" ]; then | |
| 2394 _conf_data="$(cat "$_c_c_f")" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2395 echo "$_conf_data" | sed "/^$_sdkey *=.*$/d" >"$_c_c_f" |
| 1630 | 2396 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2397 _err "Config file is empty, cannot clear" |
| 1630 | 2398 fi |
| 2399 } | |
| 2400 | |
| 2401 #_read_conf file key | |
| 2402 _read_conf() { | |
| 2403 _r_c_f="$1" | |
| 2404 _sdkey="$2" | |
| 2405 if [ -f "$_r_c_f" ]; then | |
| 2406 _sdv="$( | |
| 2407 eval "$(grep "^$_sdkey *=" "$_r_c_f")" | |
| 2408 eval "printf \"%s\" \"\$$_sdkey\"" | |
| 2409 )" | |
| 2410 if _startswith "$_sdv" "${B64CONF_START}" && _endswith "$_sdv" "${B64CONF_END}"; then | |
| 2411 _sdv="$(echo "$_sdv" | sed "s/${B64CONF_START}//" | sed "s/${B64CONF_END}//" | _dbase64)" | |
| 2412 fi | |
| 2413 printf "%s" "$_sdv" | |
| 2414 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2415 _debug "Config file is empty, cannot read $_sdkey" |
| 1630 | 2416 fi |
| 2417 } | |
| 2418 | |
| 2419 #_savedomainconf key value base64encode | |
| 2420 #save to domain.conf | |
| 2421 _savedomainconf() { | |
| 2422 _save_conf "$DOMAIN_CONF" "$@" | |
| 2423 } | |
| 2424 | |
| 2425 #_cleardomainconf key | |
| 2426 _cleardomainconf() { | |
| 2427 _clear_conf "$DOMAIN_CONF" "$1" | |
| 2428 } | |
| 2429 | |
| 2430 #_readdomainconf key | |
| 2431 _readdomainconf() { | |
| 2432 _read_conf "$DOMAIN_CONF" "$1" | |
| 2433 } | |
| 2434 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2435 #_migratedomainconf oldkey newkey base64encode |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2436 _migratedomainconf() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2437 _old_key="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2438 _new_key="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2439 _b64encode="$3" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2440 _old_value=$(_readdomainconf "$_old_key") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2441 _cleardomainconf "$_old_key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2442 if [ -z "$_old_value" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2443 return 1 # migrated failed: old value is empty |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2444 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2445 _new_value=$(_readdomainconf "$_new_key") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2446 if [ -n "$_new_value" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2447 _debug "Domain config new key exists, old key $_old_key='$_old_value' has been removed." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2448 return 1 # migrated failed: old value replaced by new value |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2449 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2450 _savedomainconf "$_new_key" "$_old_value" "$_b64encode" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2451 _debug "Domain config $_old_key has been migrated to $_new_key." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2452 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2453 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2454 #_migratedeployconf oldkey newkey base64encode |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2455 _migratedeployconf() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2456 _migratedomainconf "$1" "SAVED_$2" "$3" || |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2457 _migratedomainconf "SAVED_$1" "SAVED_$2" "$3" # try only when oldkey itself is not found |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2458 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2459 |
| 1630 | 2460 #key value base64encode |
| 2461 _savedeployconf() { | |
| 2462 _savedomainconf "SAVED_$1" "$2" "$3" | |
| 2463 #remove later | |
| 2464 _cleardomainconf "$1" | |
| 2465 } | |
| 2466 | |
| 2467 #key | |
| 2468 _getdeployconf() { | |
| 2469 _rac_key="$1" | |
| 2470 _rac_value="$(eval echo \$"$_rac_key")" | |
| 2471 if [ "$_rac_value" ]; then | |
| 2472 if _startswith "$_rac_value" '"' && _endswith "$_rac_value" '"'; then | |
| 2473 _debug2 "trim quotation marks" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2474 eval $_rac_key=$_rac_value |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2475 export $_rac_key |
| 1630 | 2476 fi |
| 2477 return 0 # do nothing | |
| 2478 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2479 _saved="$(_readdomainconf "SAVED_$_rac_key")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2480 eval $_rac_key=\$_saved |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2481 export $_rac_key |
| 1630 | 2482 } |
| 2483 | |
| 2484 #_saveaccountconf key value base64encode | |
| 2485 _saveaccountconf() { | |
| 2486 _save_conf "$ACCOUNT_CONF_PATH" "$@" | |
| 2487 } | |
| 2488 | |
| 2489 #key value base64encode | |
| 2490 _saveaccountconf_mutable() { | |
| 2491 _save_conf "$ACCOUNT_CONF_PATH" "SAVED_$1" "$2" "$3" | |
| 2492 #remove later | |
| 2493 _clearaccountconf "$1" | |
| 2494 } | |
| 2495 | |
| 2496 #key | |
| 2497 _readaccountconf() { | |
| 2498 _read_conf "$ACCOUNT_CONF_PATH" "$1" | |
| 2499 } | |
| 2500 | |
| 2501 #key | |
| 2502 _readaccountconf_mutable() { | |
| 2503 _rac_key="$1" | |
| 2504 _readaccountconf "SAVED_$_rac_key" | |
| 2505 } | |
| 2506 | |
| 2507 #_clearaccountconf key | |
| 2508 _clearaccountconf() { | |
| 2509 _clear_conf "$ACCOUNT_CONF_PATH" "$1" | |
| 2510 } | |
| 2511 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2512 #key |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2513 _clearaccountconf_mutable() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2514 _clearaccountconf "SAVED_$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2515 #remove later |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2516 _clearaccountconf "$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2517 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2518 |
| 1630 | 2519 #_savecaconf key value |
| 2520 _savecaconf() { | |
| 2521 _save_conf "$CA_CONF" "$1" "$2" | |
| 2522 } | |
| 2523 | |
| 2524 #_readcaconf key | |
| 2525 _readcaconf() { | |
| 2526 _read_conf "$CA_CONF" "$1" | |
| 2527 } | |
| 2528 | |
| 2529 #_clearaccountconf key | |
| 2530 _clearcaconf() { | |
| 2531 _clear_conf "$CA_CONF" "$1" | |
| 2532 } | |
| 2533 | |
| 2534 # content localaddress | |
| 2535 _startserver() { | |
| 2536 content="$1" | |
| 2537 ncaddr="$2" | |
| 2538 _debug "content" "$content" | |
| 2539 _debug "ncaddr" "$ncaddr" | |
| 2540 | |
| 2541 _debug "startserver: $$" | |
| 2542 | |
| 2543 _debug Le_HTTPPort "$Le_HTTPPort" | |
| 2544 _debug Le_Listen_V4 "$Le_Listen_V4" | |
| 2545 _debug Le_Listen_V6 "$Le_Listen_V6" | |
| 2546 | |
| 2547 _NC="socat" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2548 if [ "$Le_Listen_V6" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2549 _NC="$_NC -6" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2550 SOCAT_OPTIONS=TCP6-LISTEN |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2551 elif [ "$Le_Listen_V4" ]; then |
| 1630 | 2552 _NC="$_NC -4" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2553 SOCAT_OPTIONS=TCP4-LISTEN |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2554 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2555 SOCAT_OPTIONS=TCP-LISTEN |
| 1630 | 2556 fi |
| 2557 | |
| 2558 if [ "$DEBUG" ] && [ "$DEBUG" -gt "1" ]; then | |
| 2559 _NC="$_NC -d -d -v" | |
| 2560 fi | |
| 2561 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2562 SOCAT_OPTIONS=$SOCAT_OPTIONS:$Le_HTTPPort,crlf,reuseaddr,fork |
| 1630 | 2563 |
| 2564 #Adding bind to local-address | |
| 2565 if [ "$ncaddr" ]; then | |
| 2566 SOCAT_OPTIONS="$SOCAT_OPTIONS,bind=${ncaddr}" | |
| 2567 fi | |
| 2568 | |
| 2569 _content_len="$(printf "%s" "$content" | wc -c)" | |
| 2570 _debug _content_len "$_content_len" | |
| 2571 _debug "_NC" "$_NC $SOCAT_OPTIONS" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2572 export _SOCAT_ERR="$(_mktemp)" |
| 1630 | 2573 $_NC $SOCAT_OPTIONS SYSTEM:"sleep 1; \ |
| 2574 echo 'HTTP/1.0 200 OK'; \ | |
| 2575 echo 'Content-Length\: $_content_len'; \ | |
| 2576 echo ''; \ | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2577 printf '%s' '$content';" 2>"$_SOCAT_ERR" & |
| 1630 | 2578 serverproc="$!" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2579 if [ -f "$_SOCAT_ERR" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2580 if grep "Permission denied" "$_SOCAT_ERR" >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2581 _err "socat: $(cat $_SOCAT_ERR)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2582 _err "Can not listen for user: $(whoami)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2583 _err "Maybe try with root again?" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2584 rm -f "$_SOCAT_ERR" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2585 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2586 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2587 fi |
| 1630 | 2588 } |
| 2589 | |
| 2590 _stopserver() { | |
| 2591 pid="$1" | |
| 2592 _debug "pid" "$pid" | |
| 2593 if [ -z "$pid" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2594 rm -f "$_SOCAT_ERR" |
| 1630 | 2595 return |
| 2596 fi | |
| 2597 | |
| 2598 kill $pid | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2599 rm -f "$_SOCAT_ERR" |
| 1630 | 2600 |
| 2601 } | |
| 2602 | |
| 2603 # sleep sec | |
| 2604 _sleep() { | |
| 2605 _sleep_sec="$1" | |
| 2606 if [ "$__INTERACTIVE" ]; then | |
| 2607 _sleep_c="$_sleep_sec" | |
| 2608 while [ "$_sleep_c" -ge "0" ]; do | |
| 2609 printf "\r \r" | |
| 2610 __green "$_sleep_c" | |
| 2611 _sleep_c="$(_math "$_sleep_c" - 1)" | |
| 2612 sleep 1 | |
| 2613 done | |
| 2614 printf "\r" | |
| 2615 else | |
| 2616 sleep "$_sleep_sec" | |
| 2617 fi | |
| 2618 } | |
| 2619 | |
| 2620 # _starttlsserver san_a san_b port content _ncaddr acmeValidationv1 | |
| 2621 _starttlsserver() { | |
| 2622 _info "Starting tls server." | |
| 2623 san_a="$1" | |
| 2624 san_b="$2" | |
| 2625 port="$3" | |
| 2626 content="$4" | |
| 2627 opaddr="$5" | |
| 2628 acmeValidationv1="$6" | |
| 2629 | |
| 2630 _debug san_a "$san_a" | |
| 2631 _debug san_b "$san_b" | |
| 2632 _debug port "$port" | |
| 2633 _debug acmeValidationv1 "$acmeValidationv1" | |
| 2634 | |
| 2635 #create key TLS_KEY | |
| 2636 if ! _createkey "2048" "$TLS_KEY"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2637 _err "Error creating TLS validation key." |
| 1630 | 2638 return 1 |
| 2639 fi | |
| 2640 | |
| 2641 #create csr | |
| 2642 alt="$san_a" | |
| 2643 if [ "$san_b" ]; then | |
| 2644 alt="$alt,$san_b" | |
| 2645 fi | |
| 2646 if ! _createcsr "tls.acme.sh" "$alt" "$TLS_KEY" "$TLS_CSR" "$TLS_CONF" "$acmeValidationv1"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2647 _err "Error creating TLS validation CSR." |
| 1630 | 2648 return 1 |
| 2649 fi | |
| 2650 | |
| 2651 #self signed | |
| 2652 if ! _signcsr "$TLS_KEY" "$TLS_CSR" "$TLS_CONF" "$TLS_CERT"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2653 _err "Error creating TLS validation cert." |
| 1630 | 2654 return 1 |
| 2655 fi | |
| 2656 | |
| 2657 __S_OPENSSL="${ACME_OPENSSL_BIN:-openssl} s_server -www -cert $TLS_CERT -key $TLS_KEY " | |
| 2658 if [ "$opaddr" ]; then | |
| 2659 __S_OPENSSL="$__S_OPENSSL -accept $opaddr:$port" | |
| 2660 else | |
| 2661 __S_OPENSSL="$__S_OPENSSL -accept $port" | |
| 2662 fi | |
| 2663 | |
| 2664 _debug Le_Listen_V4 "$Le_Listen_V4" | |
| 2665 _debug Le_Listen_V6 "$Le_Listen_V6" | |
| 2666 if [ "$Le_Listen_V4" ]; then | |
| 2667 __S_OPENSSL="$__S_OPENSSL -4" | |
| 2668 elif [ "$Le_Listen_V6" ]; then | |
| 2669 __S_OPENSSL="$__S_OPENSSL -6" | |
| 2670 fi | |
| 2671 | |
| 2672 if [ "$acmeValidationv1" ]; then | |
| 2673 __S_OPENSSL="$__S_OPENSSL -alpn acme-tls/1" | |
| 2674 fi | |
| 2675 | |
| 2676 _debug "$__S_OPENSSL" | |
| 2677 if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ]; then | |
| 2678 $__S_OPENSSL -tlsextdebug & | |
| 2679 else | |
| 2680 $__S_OPENSSL >/dev/null 2>&1 & | |
| 2681 fi | |
| 2682 | |
| 2683 serverproc="$!" | |
| 2684 sleep 1 | |
| 2685 _debug serverproc "$serverproc" | |
| 2686 } | |
| 2687 | |
| 2688 #file | |
| 2689 _readlink() { | |
| 2690 _rf="$1" | |
| 2691 if ! readlink -f "$_rf" 2>/dev/null; then | |
| 2692 if _startswith "$_rf" "/"; then | |
| 2693 echo "$_rf" | |
| 2694 return 0 | |
| 2695 fi | |
| 2696 echo "$(pwd)/$_rf" | _conapath | |
| 2697 fi | |
| 2698 } | |
| 2699 | |
| 2700 _conapath() { | |
| 2701 sed "s#/\./#/#g" | |
| 2702 } | |
| 2703 | |
| 2704 __initHome() { | |
| 2705 if [ -z "$_SCRIPT_HOME" ]; then | |
| 2706 if _exists readlink && _exists dirname; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2707 _debug "Let's find the script directory." |
| 1630 | 2708 _debug "_SCRIPT_" "$_SCRIPT_" |
| 2709 _script="$(_readlink "$_SCRIPT_")" | |
| 2710 _debug "_script" "$_script" | |
| 2711 _script_home="$(dirname "$_script")" | |
| 2712 _debug "_script_home" "$_script_home" | |
| 2713 if [ -d "$_script_home" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2714 export _SCRIPT_HOME="$_script_home" |
| 1630 | 2715 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2716 _err "It seems the script home is not correct: $_script_home" |
| 1630 | 2717 fi |
| 2718 fi | |
| 2719 fi | |
| 2720 | |
| 2721 # if [ -z "$LE_WORKING_DIR" ]; then | |
| 2722 # if [ -f "$DEFAULT_INSTALL_HOME/account.conf" ]; then | |
| 2723 # _debug "It seems that $PROJECT_NAME is already installed in $DEFAULT_INSTALL_HOME" | |
| 2724 # LE_WORKING_DIR="$DEFAULT_INSTALL_HOME" | |
| 2725 # else | |
| 2726 # LE_WORKING_DIR="$_SCRIPT_HOME" | |
| 2727 # fi | |
| 2728 # fi | |
| 2729 | |
| 2730 if [ -z "$LE_WORKING_DIR" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2731 _debug "Using default home: $DEFAULT_INSTALL_HOME" |
| 1630 | 2732 LE_WORKING_DIR="$DEFAULT_INSTALL_HOME" |
| 2733 fi | |
| 2734 export LE_WORKING_DIR | |
| 2735 | |
| 2736 if [ -z "$LE_CONFIG_HOME" ]; then | |
| 2737 LE_CONFIG_HOME="$LE_WORKING_DIR" | |
| 2738 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2739 _debug "Using config home: $LE_CONFIG_HOME" |
| 1630 | 2740 export LE_CONFIG_HOME |
| 2741 | |
| 2742 _DEFAULT_ACCOUNT_CONF_PATH="$LE_CONFIG_HOME/account.conf" | |
| 2743 | |
| 2744 if [ -z "$ACCOUNT_CONF_PATH" ]; then | |
| 2745 if [ -f "$_DEFAULT_ACCOUNT_CONF_PATH" ]; then | |
| 2746 . "$_DEFAULT_ACCOUNT_CONF_PATH" | |
| 2747 fi | |
| 2748 fi | |
| 2749 | |
| 2750 if [ -z "$ACCOUNT_CONF_PATH" ]; then | |
| 2751 ACCOUNT_CONF_PATH="$_DEFAULT_ACCOUNT_CONF_PATH" | |
| 2752 fi | |
| 2753 _debug3 ACCOUNT_CONF_PATH "$ACCOUNT_CONF_PATH" | |
| 2754 DEFAULT_LOG_FILE="$LE_CONFIG_HOME/$PROJECT_NAME.log" | |
| 2755 | |
| 2756 DEFAULT_CA_HOME="$LE_CONFIG_HOME/ca" | |
| 2757 | |
| 2758 if [ -z "$LE_TEMP_DIR" ]; then | |
| 2759 LE_TEMP_DIR="$LE_CONFIG_HOME/tmp" | |
| 2760 fi | |
| 2761 } | |
| 2762 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2763 _clearAPI() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2764 ACME_NEW_ACCOUNT="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2765 ACME_KEY_CHANGE="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2766 ACME_NEW_AUTHZ="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2767 ACME_NEW_ORDER="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2768 ACME_REVOKE_CERT="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2769 ACME_NEW_NONCE="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2770 ACME_AGREEMENT="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2771 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2772 |
| 1630 | 2773 #server |
| 2774 _initAPI() { | |
| 2775 _api_server="${1:-$ACME_DIRECTORY}" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2776 _debug "_init API for server: $_api_server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2777 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2778 MAX_API_RETRY_TIMES=10 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2779 _sleep_retry_sec=10 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2780 _request_retry_times=0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2781 while [ -z "$ACME_NEW_ACCOUNT" ] && [ "${_request_retry_times}" -lt "$MAX_API_RETRY_TIMES" ]; do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2782 _request_retry_times=$(_math "$_request_retry_times" + 1) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2783 response=$(_get "$_api_server" "" 10) |
| 1630 | 2784 if [ "$?" != "0" ]; then |
| 2785 _debug2 "response" "$response" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2786 _info "Cannot init API for: $_api_server." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2787 _info "Sleeping for $_sleep_retry_sec seconds and retrying." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2788 _sleep "$_sleep_retry_sec" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2789 continue |
| 1630 | 2790 fi |
| 2791 response=$(echo "$response" | _json_decode) | |
| 2792 _debug2 "response" "$response" | |
| 2793 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2794 ACME_KEY_CHANGE=$(echo "$response" | _egrep_o 'keyChange" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2795 export ACME_KEY_CHANGE |
| 2796 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2797 ACME_NEW_AUTHZ=$(echo "$response" | _egrep_o 'newAuthz" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2798 export ACME_NEW_AUTHZ |
| 2799 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2800 ACME_NEW_ORDER=$(echo "$response" | _egrep_o 'newOrder" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2801 export ACME_NEW_ORDER |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2802 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2803 ACME_NEW_ACCOUNT=$(echo "$response" | _egrep_o 'newAccount" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2804 export ACME_NEW_ACCOUNT |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2805 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2806 ACME_REVOKE_CERT=$(echo "$response" | _egrep_o 'revokeCert" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2807 export ACME_REVOKE_CERT |
| 2808 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2809 ACME_NEW_NONCE=$(echo "$response" | _egrep_o 'newNonce" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2810 export ACME_NEW_NONCE |
| 2811 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2812 ACME_AGREEMENT=$(echo "$response" | _egrep_o 'termsOfService" *: *"[^"]*"' | cut -d '"' -f 3) |
| 1630 | 2813 export ACME_AGREEMENT |
| 2814 | |
| 2815 _debug "ACME_KEY_CHANGE" "$ACME_KEY_CHANGE" | |
| 2816 _debug "ACME_NEW_AUTHZ" "$ACME_NEW_AUTHZ" | |
| 2817 _debug "ACME_NEW_ORDER" "$ACME_NEW_ORDER" | |
| 2818 _debug "ACME_NEW_ACCOUNT" "$ACME_NEW_ACCOUNT" | |
| 2819 _debug "ACME_REVOKE_CERT" "$ACME_REVOKE_CERT" | |
| 2820 _debug "ACME_AGREEMENT" "$ACME_AGREEMENT" | |
| 2821 _debug "ACME_NEW_NONCE" "$ACME_NEW_NONCE" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2822 if [ "$ACME_NEW_ACCOUNT" ] && [ "$ACME_NEW_ORDER" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2823 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2824 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2825 _info "Sleeping for $_sleep_retry_sec seconds and retrying." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2826 _sleep "$_sleep_retry_sec" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2827 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2828 if [ "$ACME_NEW_ACCOUNT" ] && [ "$ACME_NEW_ORDER" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2829 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2830 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2831 _err "Cannot init API for $_api_server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2832 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2833 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2834 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2835 _clearCA() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2836 export CA_CONF= |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2837 export ACCOUNT_KEY_PATH= |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2838 export ACCOUNT_JSON_PATH= |
| 1630 | 2839 } |
| 2840 | |
| 2841 #[domain] [keylength or isEcc flag] | |
| 2842 _initpath() { | |
| 2843 domain="$1" | |
| 2844 _ilength="$2" | |
| 2845 | |
| 2846 __initHome | |
| 2847 | |
| 2848 if [ -f "$ACCOUNT_CONF_PATH" ]; then | |
| 2849 . "$ACCOUNT_CONF_PATH" | |
| 2850 fi | |
| 2851 | |
| 2852 if [ "$_ACME_IN_CRON" ]; then | |
| 2853 if [ ! "$_USER_PATH_EXPORTED" ]; then | |
| 2854 _USER_PATH_EXPORTED=1 | |
| 2855 export PATH="$USER_PATH:$PATH" | |
| 2856 fi | |
| 2857 fi | |
| 2858 | |
| 2859 if [ -z "$CA_HOME" ]; then | |
| 2860 CA_HOME="$DEFAULT_CA_HOME" | |
| 2861 fi | |
| 2862 | |
| 2863 if [ -z "$ACME_DIRECTORY" ]; then | |
| 2864 if [ "$STAGE" ]; then | |
| 2865 ACME_DIRECTORY="$DEFAULT_STAGING_CA" | |
| 2866 _info "Using ACME_DIRECTORY: $ACME_DIRECTORY" | |
| 2867 else | |
| 2868 default_acme_server=$(_readaccountconf "DEFAULT_ACME_SERVER") | |
| 2869 _debug default_acme_server "$default_acme_server" | |
| 2870 if [ "$default_acme_server" ]; then | |
| 2871 ACME_DIRECTORY="$default_acme_server" | |
| 2872 else | |
| 2873 ACME_DIRECTORY="$DEFAULT_CA" | |
| 2874 fi | |
| 2875 fi | |
| 2876 fi | |
| 2877 | |
| 2878 _debug ACME_DIRECTORY "$ACME_DIRECTORY" | |
| 2879 _ACME_SERVER_HOST="$(echo "$ACME_DIRECTORY" | cut -d : -f 2 | tr -s / | cut -d / -f 2)" | |
| 2880 _debug2 "_ACME_SERVER_HOST" "$_ACME_SERVER_HOST" | |
| 2881 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2882 _ACME_SERVER_PATH="$(echo "$ACME_DIRECTORY" | cut -d : -f 2- | tr -s / | cut -d / -f 3-)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2883 _debug2 "_ACME_SERVER_PATH" "$_ACME_SERVER_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2884 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2885 CA_DIR="$CA_HOME/$_ACME_SERVER_HOST/$_ACME_SERVER_PATH" |
| 1630 | 2886 _DEFAULT_CA_CONF="$CA_DIR/ca.conf" |
| 2887 if [ -z "$CA_CONF" ]; then | |
| 2888 CA_CONF="$_DEFAULT_CA_CONF" | |
| 2889 fi | |
| 2890 _debug3 CA_CONF "$CA_CONF" | |
| 2891 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2892 _OLD_CADIR="$CA_HOME/$_ACME_SERVER_HOST" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2893 _OLD_ACCOUNT_KEY="$_OLD_CADIR/account.key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2894 _OLD_ACCOUNT_JSON="$_OLD_CADIR/account.json" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2895 _OLD_CA_CONF="$_OLD_CADIR/ca.conf" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2896 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2897 _DEFAULT_ACCOUNT_KEY_PATH="$CA_DIR/account.key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2898 _DEFAULT_ACCOUNT_JSON_PATH="$CA_DIR/account.json" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2899 if [ -z "$ACCOUNT_KEY_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2900 ACCOUNT_KEY_PATH="$_DEFAULT_ACCOUNT_KEY_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2901 if [ -f "$_OLD_ACCOUNT_KEY" ] && ! [ -f "$ACCOUNT_KEY_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2902 mkdir -p "$CA_DIR" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2903 mv "$_OLD_ACCOUNT_KEY" "$ACCOUNT_KEY_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2904 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2905 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2906 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2907 if [ -z "$ACCOUNT_JSON_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2908 ACCOUNT_JSON_PATH="$_DEFAULT_ACCOUNT_JSON_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2909 if [ -f "$_OLD_ACCOUNT_JSON" ] && ! [ -f "$ACCOUNT_JSON_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2910 mkdir -p "$CA_DIR" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2911 mv "$_OLD_ACCOUNT_JSON" "$ACCOUNT_JSON_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2912 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2913 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2914 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2915 if [ -f "$_OLD_CA_CONF" ] && ! [ -f "$CA_CONF" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2916 mkdir -p "$CA_DIR" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2917 mv "$_OLD_CA_CONF" "$CA_CONF" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2918 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2919 |
| 1630 | 2920 if [ -f "$CA_CONF" ]; then |
| 2921 . "$CA_CONF" | |
| 2922 fi | |
| 2923 | |
| 2924 if [ -z "$ACME_DIR" ]; then | |
| 2925 ACME_DIR="/home/.acme" | |
| 2926 fi | |
| 2927 | |
| 2928 if [ -z "$APACHE_CONF_BACKUP_DIR" ]; then | |
| 2929 APACHE_CONF_BACKUP_DIR="$LE_CONFIG_HOME" | |
| 2930 fi | |
| 2931 | |
| 2932 if [ -z "$USER_AGENT" ]; then | |
| 2933 USER_AGENT="$DEFAULT_USER_AGENT" | |
| 2934 fi | |
| 2935 | |
| 2936 if [ -z "$HTTP_HEADER" ]; then | |
| 2937 HTTP_HEADER="$LE_CONFIG_HOME/http.header" | |
| 2938 fi | |
| 2939 | |
| 2940 _DEFAULT_CERT_HOME="$LE_CONFIG_HOME" | |
| 2941 if [ -z "$CERT_HOME" ]; then | |
| 2942 CERT_HOME="$_DEFAULT_CERT_HOME" | |
| 2943 fi | |
| 2944 | |
| 2945 if [ -z "$ACME_OPENSSL_BIN" ] || [ ! -f "$ACME_OPENSSL_BIN" ] || [ ! -x "$ACME_OPENSSL_BIN" ]; then | |
| 2946 ACME_OPENSSL_BIN="$DEFAULT_OPENSSL_BIN" | |
| 2947 fi | |
| 2948 | |
| 2949 if [ -z "$domain" ]; then | |
| 2950 return 0 | |
| 2951 fi | |
| 2952 | |
| 2953 if [ -z "$DOMAIN_PATH" ]; then | |
| 2954 domainhome="$CERT_HOME/$domain" | |
| 2955 domainhomeecc="$CERT_HOME/$domain$ECC_SUFFIX" | |
| 2956 | |
| 2957 DOMAIN_PATH="$domainhome" | |
| 2958 | |
| 2959 if _isEccKey "$_ilength"; then | |
| 2960 DOMAIN_PATH="$domainhomeecc" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2961 elif [ -z "$__SELECTED_RSA_KEY" ]; then |
| 1630 | 2962 if [ ! -d "$domainhome" ] && [ -d "$domainhomeecc" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2963 _info "The domain '$domain' seems to already have an ECC cert, let's use it." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2964 DOMAIN_PATH="$domainhomeecc" |
| 1630 | 2965 fi |
| 2966 fi | |
| 2967 _debug DOMAIN_PATH "$DOMAIN_PATH" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
2968 export DOMAIN_PATH |
| 1630 | 2969 fi |
| 2970 | |
| 2971 if [ -z "$DOMAIN_BACKUP_PATH" ]; then | |
| 2972 DOMAIN_BACKUP_PATH="$DOMAIN_PATH/backup" | |
| 2973 fi | |
| 2974 | |
| 2975 if [ -z "$DOMAIN_CONF" ]; then | |
| 2976 DOMAIN_CONF="$DOMAIN_PATH/$domain.conf" | |
| 2977 fi | |
| 2978 | |
| 2979 if [ -z "$DOMAIN_SSL_CONF" ]; then | |
| 2980 DOMAIN_SSL_CONF="$DOMAIN_PATH/$domain.csr.conf" | |
| 2981 fi | |
| 2982 | |
| 2983 if [ -z "$CSR_PATH" ]; then | |
| 2984 CSR_PATH="$DOMAIN_PATH/$domain.csr" | |
| 2985 fi | |
| 2986 if [ -z "$CERT_KEY_PATH" ]; then | |
| 2987 CERT_KEY_PATH="$DOMAIN_PATH/$domain.key" | |
| 2988 fi | |
| 2989 if [ -z "$CERT_PATH" ]; then | |
| 2990 CERT_PATH="$DOMAIN_PATH/$domain.cer" | |
| 2991 fi | |
| 2992 if [ -z "$CA_CERT_PATH" ]; then | |
| 2993 CA_CERT_PATH="$DOMAIN_PATH/ca.cer" | |
| 2994 fi | |
| 2995 if [ -z "$CERT_FULLCHAIN_PATH" ]; then | |
| 2996 CERT_FULLCHAIN_PATH="$DOMAIN_PATH/fullchain.cer" | |
| 2997 fi | |
| 2998 if [ -z "$CERT_PFX_PATH" ]; then | |
| 2999 CERT_PFX_PATH="$DOMAIN_PATH/$domain.pfx" | |
| 3000 fi | |
| 3001 if [ -z "$CERT_PKCS8_PATH" ]; then | |
| 3002 CERT_PKCS8_PATH="$DOMAIN_PATH/$domain.pkcs8" | |
| 3003 fi | |
| 3004 | |
| 3005 if [ -z "$TLS_CONF" ]; then | |
| 3006 TLS_CONF="$DOMAIN_PATH/tls.validation.conf" | |
| 3007 fi | |
| 3008 if [ -z "$TLS_CERT" ]; then | |
| 3009 TLS_CERT="$DOMAIN_PATH/tls.validation.cert" | |
| 3010 fi | |
| 3011 if [ -z "$TLS_KEY" ]; then | |
| 3012 TLS_KEY="$DOMAIN_PATH/tls.validation.key" | |
| 3013 fi | |
| 3014 if [ -z "$TLS_CSR" ]; then | |
| 3015 TLS_CSR="$DOMAIN_PATH/tls.validation.csr" | |
| 3016 fi | |
| 3017 | |
| 3018 } | |
| 3019 | |
| 3020 _apachePath() { | |
| 3021 _APACHECTL="apachectl" | |
| 3022 if ! _exists apachectl; then | |
| 3023 if _exists apache2ctl; then | |
| 3024 _APACHECTL="apache2ctl" | |
| 3025 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3026 _err "'apachectl not found. It seems that Apache is not installed or you are not root.'" |
| 1630 | 3027 _err "Please use webroot mode to try again." |
| 3028 return 1 | |
| 3029 fi | |
| 3030 fi | |
| 3031 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3032 if ! $_APACHECTL -V >/dev/null; then |
| 1630 | 3033 return 1 |
| 3034 fi | |
| 3035 | |
| 3036 if [ "$APACHE_HTTPD_CONF" ]; then | |
| 3037 _saveaccountconf APACHE_HTTPD_CONF "$APACHE_HTTPD_CONF" | |
| 3038 httpdconf="$APACHE_HTTPD_CONF" | |
| 3039 httpdconfname="$(basename "$httpdconfname")" | |
| 3040 else | |
| 3041 httpdconfname="$($_APACHECTL -V | grep SERVER_CONFIG_FILE= | cut -d = -f 2 | tr -d '"')" | |
| 3042 _debug httpdconfname "$httpdconfname" | |
| 3043 | |
| 3044 if [ -z "$httpdconfname" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3045 _err "Cannot read Apache config file." |
| 1630 | 3046 return 1 |
| 3047 fi | |
| 3048 | |
| 3049 if _startswith "$httpdconfname" '/'; then | |
| 3050 httpdconf="$httpdconfname" | |
| 3051 httpdconfname="$(basename "$httpdconfname")" | |
| 3052 else | |
| 3053 httpdroot="$($_APACHECTL -V | grep HTTPD_ROOT= | cut -d = -f 2 | tr -d '"')" | |
| 3054 _debug httpdroot "$httpdroot" | |
| 3055 httpdconf="$httpdroot/$httpdconfname" | |
| 3056 httpdconfname="$(basename "$httpdconfname")" | |
| 3057 fi | |
| 3058 fi | |
| 3059 _debug httpdconf "$httpdconf" | |
| 3060 _debug httpdconfname "$httpdconfname" | |
| 3061 if [ ! -f "$httpdconf" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3062 _err "Apache config file not found" "$httpdconf" |
| 1630 | 3063 return 1 |
| 3064 fi | |
| 3065 return 0 | |
| 3066 } | |
| 3067 | |
| 3068 _restoreApache() { | |
| 3069 if [ -z "$usingApache" ]; then | |
| 3070 return 0 | |
| 3071 fi | |
| 3072 _initpath | |
| 3073 if ! _apachePath; then | |
| 3074 return 1 | |
| 3075 fi | |
| 3076 | |
| 3077 if [ ! -f "$APACHE_CONF_BACKUP_DIR/$httpdconfname" ]; then | |
| 3078 _debug "No config file to restore." | |
| 3079 return 0 | |
| 3080 fi | |
| 3081 | |
| 3082 cat "$APACHE_CONF_BACKUP_DIR/$httpdconfname" >"$httpdconf" | |
| 3083 _debug "Restored: $httpdconf." | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3084 if ! $_APACHECTL -t; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3085 _err "Sorry, there's been an error restoring the Apache config. Please ask for support on $PROJECT." |
| 1630 | 3086 return 1 |
| 3087 fi | |
| 3088 _debug "Restored successfully." | |
| 3089 rm -f "$APACHE_CONF_BACKUP_DIR/$httpdconfname" | |
| 3090 return 0 | |
| 3091 } | |
| 3092 | |
| 3093 _setApache() { | |
| 3094 _initpath | |
| 3095 if ! _apachePath; then | |
| 3096 return 1 | |
| 3097 fi | |
| 3098 | |
| 3099 #test the conf first | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3100 _info "Checking if there is an error in the Apache config file before starting." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3101 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3102 if ! $_APACHECTL -t >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3103 _err "The Apache config file has errors, please fix them first then try again." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3104 _err "Don't worry, no changes to your system have been made." |
| 1630 | 3105 return 1 |
| 3106 else | |
| 3107 _info "OK" | |
| 3108 fi | |
| 3109 | |
| 3110 #backup the conf | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3111 _debug "Backing up Apache config file" "$httpdconf" |
| 1630 | 3112 if ! cp "$httpdconf" "$APACHE_CONF_BACKUP_DIR/"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3113 _err "Cannot backup Apache config file, aborting. Don't worry, the Apache config has not been changed." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3114 _err "This might be an $PROJECT_NAME bug, please open an issue on $PROJECT" |
| 1630 | 3115 return 1 |
| 3116 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3117 _info "Config file $httpdconf has been backed up to $APACHE_CONF_BACKUP_DIR/$httpdconfname" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3118 _info "In case an error causes it to not be restored automatically, you can restore it yourself." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3119 _info "You do not need to do anything on success, as the backup file will automatically be deleted." |
| 1630 | 3120 |
| 3121 #add alias | |
| 3122 | |
| 3123 apacheVer="$($_APACHECTL -V | grep "Server version:" | cut -d : -f 2 | cut -d " " -f 2 | cut -d '/' -f 2)" | |
| 3124 _debug "apacheVer" "$apacheVer" | |
| 3125 apacheMajor="$(echo "$apacheVer" | cut -d . -f 1)" | |
| 3126 apacheMinor="$(echo "$apacheVer" | cut -d . -f 2)" | |
| 3127 | |
| 3128 if [ "$apacheVer" ] && [ "$apacheMajor$apacheMinor" -ge "24" ]; then | |
| 3129 echo " | |
| 3130 Alias /.well-known/acme-challenge $ACME_DIR | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3131 |
| 1630 | 3132 <Directory $ACME_DIR > |
| 3133 Require all granted | |
| 3134 </Directory> | |
| 3135 " >>"$httpdconf" | |
| 3136 else | |
| 3137 echo " | |
| 3138 Alias /.well-known/acme-challenge $ACME_DIR | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3139 |
| 1630 | 3140 <Directory $ACME_DIR > |
| 3141 Order allow,deny | |
| 3142 Allow from all | |
| 3143 </Directory> | |
| 3144 " >>"$httpdconf" | |
| 3145 fi | |
| 3146 | |
| 3147 _msg="$($_APACHECTL -t 2>&1)" | |
| 3148 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3149 _err "Sorry, an Apache config error has occurred" |
| 1630 | 3150 if _restoreApache; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3151 _err "The Apache config file has been restored." |
| 1630 | 3152 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3153 _err "Sorry, the Apache config file cannot be restored, please open an issue on $PROJECT." |
| 1630 | 3154 fi |
| 3155 return 1 | |
| 3156 fi | |
| 3157 | |
| 3158 if [ ! -d "$ACME_DIR" ]; then | |
| 3159 mkdir -p "$ACME_DIR" | |
| 3160 chmod 755 "$ACME_DIR" | |
| 3161 fi | |
| 3162 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3163 if ! $_APACHECTL graceful; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3164 _err "$_APACHECTL graceful error, please open an issue on $PROJECT." |
| 1630 | 3165 _restoreApache |
| 3166 return 1 | |
| 3167 fi | |
| 3168 usingApache="1" | |
| 3169 return 0 | |
| 3170 } | |
| 3171 | |
| 3172 #find the real nginx conf file | |
| 3173 #backup | |
| 3174 #set the nginx conf | |
| 3175 #returns the real nginx conf file | |
| 3176 _setNginx() { | |
| 3177 _d="$1" | |
| 3178 _croot="$2" | |
| 3179 _thumbpt="$3" | |
| 3180 | |
| 3181 FOUND_REAL_NGINX_CONF="" | |
| 3182 FOUND_REAL_NGINX_CONF_LN="" | |
| 3183 BACKUP_NGINX_CONF="" | |
| 3184 _debug _croot "$_croot" | |
| 3185 _start_f="$(echo "$_croot" | cut -d : -f 2)" | |
| 3186 _debug _start_f "$_start_f" | |
| 3187 if [ -z "$_start_f" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3188 _debug "Finding config using the nginx command" |
| 1630 | 3189 if [ -z "$NGINX_CONF" ]; then |
| 3190 if ! _exists "nginx"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3191 _err "nginx command not found." |
| 1630 | 3192 return 1 |
| 3193 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3194 NGINX_CONF="$(nginx -V 2>&1 | _egrep_o "\-\-conf-path=[^ ]* " | tr -d " ")" |
| 1630 | 3195 _debug NGINX_CONF "$NGINX_CONF" |
| 3196 NGINX_CONF="$(echo "$NGINX_CONF" | cut -d = -f 2)" | |
| 3197 _debug NGINX_CONF "$NGINX_CONF" | |
| 3198 if [ -z "$NGINX_CONF" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3199 _err "Cannot find nginx config." |
| 1630 | 3200 NGINX_CONF="" |
| 3201 return 1 | |
| 3202 fi | |
| 3203 if [ ! -f "$NGINX_CONF" ]; then | |
| 3204 _err "'$NGINX_CONF' doesn't exist." | |
| 3205 NGINX_CONF="" | |
| 3206 return 1 | |
| 3207 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3208 _debug "Found nginx config file: $NGINX_CONF" |
| 1630 | 3209 fi |
| 3210 _start_f="$NGINX_CONF" | |
| 3211 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3212 _debug "Detecting nginx conf for $_d from: $_start_f" |
| 1630 | 3213 if ! _checkConf "$_d" "$_start_f"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3214 _err "Cannot find config file for domain $d" |
| 1630 | 3215 return 1 |
| 3216 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3217 _info "Found config file: $FOUND_REAL_NGINX_CONF" |
| 1630 | 3218 |
| 3219 _ln=$FOUND_REAL_NGINX_CONF_LN | |
| 3220 _debug "_ln" "$_ln" | |
| 3221 | |
| 3222 _lnn=$(_math $_ln + 1) | |
| 3223 _debug _lnn "$_lnn" | |
| 3224 _start_tag="$(sed -n "$_lnn,${_lnn}p" "$FOUND_REAL_NGINX_CONF")" | |
| 3225 _debug "_start_tag" "$_start_tag" | |
| 3226 if [ "$_start_tag" = "$NGINX_START" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3227 _info "The domain $_d is already configured, skipping" |
| 1630 | 3228 FOUND_REAL_NGINX_CONF="" |
| 3229 return 0 | |
| 3230 fi | |
| 3231 | |
| 3232 mkdir -p "$DOMAIN_BACKUP_PATH" | |
| 3233 _backup_conf="$DOMAIN_BACKUP_PATH/$_d.nginx.conf" | |
| 3234 _debug _backup_conf "$_backup_conf" | |
| 3235 BACKUP_NGINX_CONF="$_backup_conf" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3236 _info "Backing $FOUND_REAL_NGINX_CONF up to $_backup_conf" |
| 1630 | 3237 if ! cp "$FOUND_REAL_NGINX_CONF" "$_backup_conf"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3238 _err "Backup error." |
| 1630 | 3239 FOUND_REAL_NGINX_CONF="" |
| 3240 return 1 | |
| 3241 fi | |
| 3242 | |
| 3243 if ! _exists "nginx"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3244 _err "nginx command not found." |
| 1630 | 3245 return 1 |
| 3246 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3247 _info "Checking the nginx config before setting up." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3248 if ! nginx -t >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3249 _err "It seems that the nginx config is not correct, cannot continue." |
| 1630 | 3250 return 1 |
| 3251 fi | |
| 3252 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3253 _info "OK, setting up the nginx config file" |
| 1630 | 3254 |
| 3255 if ! sed -n "1,${_ln}p" "$_backup_conf" >"$FOUND_REAL_NGINX_CONF"; then | |
| 3256 cat "$_backup_conf" >"$FOUND_REAL_NGINX_CONF" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3257 _err "Error writing nginx config. Restoring it to its original version." |
| 1630 | 3258 return 1 |
| 3259 fi | |
| 3260 | |
| 3261 echo "$NGINX_START | |
| 3262 location ~ \"^/\.well-known/acme-challenge/([-_a-zA-Z0-9]+)\$\" { | |
| 3263 default_type text/plain; | |
| 3264 return 200 \"\$1.$_thumbpt\"; | |
| 3265 } | |
| 3266 #NGINX_START | |
| 3267 " >>"$FOUND_REAL_NGINX_CONF" | |
| 3268 | |
| 3269 if ! sed -n "${_lnn},99999p" "$_backup_conf" >>"$FOUND_REAL_NGINX_CONF"; then | |
| 3270 cat "$_backup_conf" >"$FOUND_REAL_NGINX_CONF" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3271 _err "Error writing nginx config. Restoring it to its original version." |
| 1630 | 3272 return 1 |
| 3273 fi | |
| 3274 _debug3 "Modified config:$(cat $FOUND_REAL_NGINX_CONF)" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3275 _info "nginx config has been written, let's check it again." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3276 if ! nginx -t >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3277 _err "There seems to be a problem with the nginx config, let's restore it to its original version." |
| 1630 | 3278 cat "$_backup_conf" >"$FOUND_REAL_NGINX_CONF" |
| 3279 return 1 | |
| 3280 fi | |
| 3281 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3282 _info "Reloading nginx" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3283 if ! nginx -s reload >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3284 _err "There seems to be a problem with the nginx config, let's restore it to its original version." |
| 1630 | 3285 cat "$_backup_conf" >"$FOUND_REAL_NGINX_CONF" |
| 3286 return 1 | |
| 3287 fi | |
| 3288 | |
| 3289 return 0 | |
| 3290 } | |
| 3291 | |
| 3292 #d , conf | |
| 3293 _checkConf() { | |
| 3294 _d="$1" | |
| 3295 _c_file="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3296 _debug "Starting _checkConf from: $_c_file" |
| 1630 | 3297 if [ ! -f "$2" ] && ! echo "$2" | grep '*$' >/dev/null && echo "$2" | grep '*' >/dev/null; then |
| 3298 _debug "wildcard" | |
| 3299 for _w_f in $2; do | |
| 3300 if [ -f "$_w_f" ] && _checkConf "$1" "$_w_f"; then | |
| 3301 return 0 | |
| 3302 fi | |
| 3303 done | |
| 3304 #not found | |
| 3305 return 1 | |
| 3306 elif [ -f "$2" ]; then | |
| 3307 _debug "single" | |
| 3308 if _isRealNginxConf "$1" "$2"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3309 _debug "$2 found." |
| 1630 | 3310 FOUND_REAL_NGINX_CONF="$2" |
| 3311 return 0 | |
| 3312 fi | |
| 3313 if cat "$2" | tr "\t" " " | grep "^ *include *.*;" >/dev/null; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3314 _debug "Trying include files" |
| 1630 | 3315 for included in $(cat "$2" | tr "\t" " " | grep "^ *include *.*;" | sed "s/include //" | tr -d " ;"); do |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3316 _debug "Checking included $included" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3317 if ! _startswith "$included" "/" && _exists dirname; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3318 _relpath="$(dirname "$2")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3319 _debug "_relpath" "$_relpath" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3320 included="$_relpath/$included" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3321 fi |
| 1630 | 3322 if _checkConf "$1" "$included"; then |
| 3323 return 0 | |
| 3324 fi | |
| 3325 done | |
| 3326 fi | |
| 3327 return 1 | |
| 3328 else | |
| 3329 _debug "$2 not found." | |
| 3330 return 1 | |
| 3331 fi | |
| 3332 return 1 | |
| 3333 } | |
| 3334 | |
| 3335 #d , conf | |
| 3336 _isRealNginxConf() { | |
| 3337 _debug "_isRealNginxConf $1 $2" | |
| 3338 if [ -f "$2" ]; then | |
| 3339 for _fln in $(tr "\t" ' ' <"$2" | grep -n "^ *server_name.* $1" | cut -d : -f 1); do | |
| 3340 _debug _fln "$_fln" | |
| 3341 if [ "$_fln" ]; then | |
| 3342 _start=$(tr "\t" ' ' <"$2" | _head_n "$_fln" | grep -n "^ *server *" | grep -v server_name | _tail_n 1) | |
| 3343 _debug "_start" "$_start" | |
| 3344 _start_n=$(echo "$_start" | cut -d : -f 1) | |
| 3345 _start_nn=$(_math $_start_n + 1) | |
| 3346 _debug "_start_n" "$_start_n" | |
| 3347 _debug "_start_nn" "$_start_nn" | |
| 3348 | |
| 3349 _left="$(sed -n "${_start_nn},99999p" "$2")" | |
| 3350 _debug2 _left "$_left" | |
| 3351 _end="$(echo "$_left" | tr "\t" ' ' | grep -n "^ *server *" | grep -v server_name | _head_n 1)" | |
| 3352 _debug "_end" "$_end" | |
| 3353 if [ "$_end" ]; then | |
| 3354 _end_n=$(echo "$_end" | cut -d : -f 1) | |
| 3355 _debug "_end_n" "$_end_n" | |
| 3356 _seg_n=$(echo "$_left" | sed -n "1,${_end_n}p") | |
| 3357 else | |
| 3358 _seg_n="$_left" | |
| 3359 fi | |
| 3360 | |
| 3361 _debug "_seg_n" "$_seg_n" | |
| 3362 | |
| 3363 _skip_ssl=1 | |
| 3364 for _listen_i in $(echo "$_seg_n" | tr "\t" ' ' | grep "^ *listen" | tr -d " "); do | |
| 3365 if [ "$_listen_i" ]; then | |
| 3366 if [ "$(echo "$_listen_i" | _egrep_o "listen.*ssl")" ]; then | |
| 3367 _debug2 "$_listen_i is ssl" | |
| 3368 else | |
| 3369 _debug2 "$_listen_i is plain text" | |
| 3370 _skip_ssl="" | |
| 3371 break | |
| 3372 fi | |
| 3373 fi | |
| 3374 done | |
| 3375 | |
| 3376 if [ "$_skip_ssl" = "1" ]; then | |
| 3377 _debug "ssl on, skip" | |
| 3378 else | |
| 3379 FOUND_REAL_NGINX_CONF_LN=$_fln | |
| 3380 _debug3 "found FOUND_REAL_NGINX_CONF_LN" "$FOUND_REAL_NGINX_CONF_LN" | |
| 3381 return 0 | |
| 3382 fi | |
| 3383 fi | |
| 3384 done | |
| 3385 fi | |
| 3386 return 1 | |
| 3387 } | |
| 3388 | |
| 3389 #restore all the nginx conf | |
| 3390 _restoreNginx() { | |
| 3391 if [ -z "$NGINX_RESTORE_VLIST" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3392 _debug "No need to restore nginx config, skipping." |
| 1630 | 3393 return |
| 3394 fi | |
| 3395 _debug "_restoreNginx" | |
| 3396 _debug "NGINX_RESTORE_VLIST" "$NGINX_RESTORE_VLIST" | |
| 3397 | |
| 3398 for ng_entry in $(echo "$NGINX_RESTORE_VLIST" | tr "$dvsep" ' '); do | |
| 3399 _debug "ng_entry" "$ng_entry" | |
| 3400 _nd=$(echo "$ng_entry" | cut -d "$sep" -f 1) | |
| 3401 _ngconf=$(echo "$ng_entry" | cut -d "$sep" -f 2) | |
| 3402 _ngbackupconf=$(echo "$ng_entry" | cut -d "$sep" -f 3) | |
| 3403 _info "Restoring from $_ngbackupconf to $_ngconf" | |
| 3404 cat "$_ngbackupconf" >"$_ngconf" | |
| 3405 done | |
| 3406 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3407 _info "Reloading nginx" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3408 if ! nginx -s reload >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3409 _err "An error occurred while reloading nginx, please open an issue on $PROJECT." |
| 1630 | 3410 return 1 |
| 3411 fi | |
| 3412 return 0 | |
| 3413 } | |
| 3414 | |
| 3415 _clearup() { | |
| 3416 _stopserver "$serverproc" | |
| 3417 serverproc="" | |
| 3418 _restoreApache | |
| 3419 _restoreNginx | |
| 3420 _clearupdns | |
| 3421 if [ -z "$DEBUG" ]; then | |
| 3422 rm -f "$TLS_CONF" | |
| 3423 rm -f "$TLS_CERT" | |
| 3424 rm -f "$TLS_KEY" | |
| 3425 rm -f "$TLS_CSR" | |
| 3426 fi | |
| 3427 } | |
| 3428 | |
| 3429 _clearupdns() { | |
| 3430 _debug "_clearupdns" | |
| 3431 _debug "dns_entries" "$dns_entries" | |
| 3432 | |
| 3433 if [ -z "$dns_entries" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3434 _debug "Skipping dns." |
| 1630 | 3435 return |
| 3436 fi | |
| 3437 _info "Removing DNS records." | |
| 3438 | |
| 3439 for entry in $dns_entries; do | |
| 3440 d=$(_getfield "$entry" 1) | |
| 3441 txtdomain=$(_getfield "$entry" 2) | |
| 3442 aliasDomain=$(_getfield "$entry" 3) | |
| 3443 _currentRoot=$(_getfield "$entry" 4) | |
| 3444 txt=$(_getfield "$entry" 5) | |
| 3445 d_api=$(_getfield "$entry" 6) | |
| 3446 _debug "d" "$d" | |
| 3447 _debug "txtdomain" "$txtdomain" | |
| 3448 _debug "aliasDomain" "$aliasDomain" | |
| 3449 _debug "_currentRoot" "$_currentRoot" | |
| 3450 _debug "txt" "$txt" | |
| 3451 _debug "d_api" "$d_api" | |
| 3452 if [ "$d_api" = "$txt" ]; then | |
| 3453 d_api="" | |
| 3454 fi | |
| 3455 | |
| 3456 if [ -z "$d_api" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3457 _info "Domain API file was not found: $d_api" |
| 1630 | 3458 continue |
| 3459 fi | |
| 3460 | |
| 3461 if [ "$aliasDomain" ]; then | |
| 3462 txtdomain="$aliasDomain" | |
| 3463 fi | |
| 3464 | |
| 3465 ( | |
| 3466 if ! . "$d_api"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3467 _err "Error loading file $d_api. Please check your API file and try again." |
| 1630 | 3468 return 1 |
| 3469 fi | |
| 3470 | |
| 3471 rmcommand="${_currentRoot}_rm" | |
| 3472 if ! _exists "$rmcommand"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3473 _err "It seems that your API file doesn't define $rmcommand" |
| 1630 | 3474 return 1 |
| 3475 fi | |
| 3476 _info "Removing txt: $txt for domain: $txtdomain" | |
| 3477 if ! $rmcommand "$txtdomain" "$txt"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3478 _err "Error removing txt for domain: $txtdomain" |
| 1630 | 3479 return 1 |
| 3480 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3481 _info "Successfully removed" |
| 1630 | 3482 ) |
| 3483 | |
| 3484 done | |
| 3485 } | |
| 3486 | |
| 3487 # webroot removelevel tokenfile | |
| 3488 _clearupwebbroot() { | |
| 3489 __webroot="$1" | |
| 3490 if [ -z "$__webroot" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3491 _debug "No webroot specified, skipping" |
| 1630 | 3492 return 0 |
| 3493 fi | |
| 3494 | |
| 3495 _rmpath="" | |
| 3496 if [ "$2" = '1' ]; then | |
| 3497 _rmpath="$__webroot/.well-known" | |
| 3498 elif [ "$2" = '2' ]; then | |
| 3499 _rmpath="$__webroot/.well-known/acme-challenge" | |
| 3500 elif [ "$2" = '3' ]; then | |
| 3501 _rmpath="$__webroot/.well-known/acme-challenge/$3" | |
| 3502 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3503 _debug "Skipping for removelevel: $2" |
| 1630 | 3504 fi |
| 3505 | |
| 3506 if [ "$_rmpath" ]; then | |
| 3507 if [ "$DEBUG" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3508 _debug "Debugging, not removing: $_rmpath" |
| 1630 | 3509 else |
| 3510 rm -rf "$_rmpath" | |
| 3511 fi | |
| 3512 fi | |
| 3513 | |
| 3514 return 0 | |
| 3515 | |
| 3516 } | |
| 3517 | |
| 3518 _on_before_issue() { | |
| 3519 _chk_web_roots="$1" | |
| 3520 _chk_main_domain="$2" | |
| 3521 _chk_alt_domains="$3" | |
| 3522 _chk_pre_hook="$4" | |
| 3523 _chk_local_addr="$5" | |
| 3524 _debug _on_before_issue | |
| 3525 _debug _chk_main_domain "$_chk_main_domain" | |
| 3526 _debug _chk_alt_domains "$_chk_alt_domains" | |
| 3527 #run pre hook | |
| 3528 if [ "$_chk_pre_hook" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3529 _info "Running pre hook:'$_chk_pre_hook'" |
| 1630 | 3530 if ! ( |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3531 export Le_Domain="$_chk_main_domain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3532 export Le_Alt="$_chk_alt_domains" |
| 1630 | 3533 cd "$DOMAIN_PATH" && eval "$_chk_pre_hook" |
| 3534 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3535 _err "Error occurred when running pre hook." |
| 1630 | 3536 return 1 |
| 3537 fi | |
| 3538 fi | |
| 3539 | |
| 3540 if _hasfield "$_chk_web_roots" "$NO_VALUE"; then | |
| 3541 if ! _exists "socat"; then | |
| 3542 _err "Please install socat tools first." | |
| 3543 return 1 | |
| 3544 fi | |
| 3545 fi | |
| 3546 | |
| 3547 _debug Le_LocalAddress "$_chk_local_addr" | |
| 3548 | |
| 3549 _index=1 | |
| 3550 _currentRoot="" | |
| 3551 _addrIndex=1 | |
| 3552 _w_index=1 | |
| 3553 while true; do | |
| 3554 d="$(echo "$_chk_main_domain,$_chk_alt_domains," | cut -d , -f "$_w_index")" | |
| 3555 _w_index="$(_math "$_w_index" + 1)" | |
| 3556 _debug d "$d" | |
| 3557 if [ -z "$d" ]; then | |
| 3558 break | |
| 3559 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3560 _debug "Checking for domain" "$d" |
| 1630 | 3561 _currentRoot="$(_getfield "$_chk_web_roots" $_index)" |
| 3562 _debug "_currentRoot" "$_currentRoot" | |
| 3563 _index=$(_math $_index + 1) | |
| 3564 _checkport="" | |
| 3565 if [ "$_currentRoot" = "$NO_VALUE" ]; then | |
| 3566 _info "Standalone mode." | |
| 3567 if [ -z "$Le_HTTPPort" ]; then | |
| 3568 Le_HTTPPort=80 | |
| 3569 _cleardomainconf "Le_HTTPPort" | |
| 3570 else | |
| 3571 _savedomainconf "Le_HTTPPort" "$Le_HTTPPort" | |
| 3572 fi | |
| 3573 _checkport="$Le_HTTPPort" | |
| 3574 elif [ "$_currentRoot" = "$W_ALPN" ]; then | |
| 3575 _info "Standalone alpn mode." | |
| 3576 if [ -z "$Le_TLSPort" ]; then | |
| 3577 Le_TLSPort=443 | |
| 3578 else | |
| 3579 _savedomainconf "Le_TLSPort" "$Le_TLSPort" | |
| 3580 fi | |
| 3581 _checkport="$Le_TLSPort" | |
| 3582 fi | |
| 3583 | |
| 3584 if [ "$_checkport" ]; then | |
| 3585 _debug _checkport "$_checkport" | |
| 3586 _checkaddr="$(_getfield "$_chk_local_addr" $_addrIndex)" | |
| 3587 _debug _checkaddr "$_checkaddr" | |
| 3588 | |
| 3589 _addrIndex="$(_math $_addrIndex + 1)" | |
| 3590 | |
| 3591 _netprc="$(_ss "$_checkport" | grep "$_checkport")" | |
| 3592 netprc="$(echo "$_netprc" | grep "$_checkaddr")" | |
| 3593 if [ -z "$netprc" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3594 netprc="$(echo "$_netprc" | grep "$LOCAL_ANY_ADDRESS:$_checkport")" |
| 1630 | 3595 fi |
| 3596 if [ "$netprc" ]; then | |
| 3597 _err "$netprc" | |
| 3598 _err "tcp port $_checkport is already used by $(echo "$netprc" | cut -d : -f 4)" | |
| 3599 _err "Please stop it first" | |
| 3600 return 1 | |
| 3601 fi | |
| 3602 fi | |
| 3603 done | |
| 3604 | |
| 3605 if _hasfield "$_chk_web_roots" "apache"; then | |
| 3606 if ! _setApache; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3607 _err "Error setting up Apache. Please open an issue on $PROJECT." |
| 1630 | 3608 return 1 |
| 3609 fi | |
| 3610 else | |
| 3611 usingApache="" | |
| 3612 fi | |
| 3613 | |
| 3614 } | |
| 3615 | |
| 3616 _on_issue_err() { | |
| 3617 _chk_post_hook="$1" | |
| 3618 _chk_vlist="$2" | |
| 3619 _debug _on_issue_err | |
| 3620 | |
| 3621 if [ "$LOG_FILE" ]; then | |
| 3622 _err "Please check log file for more details: $LOG_FILE" | |
| 3623 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3624 _err "Please add '--debug' or '--log' to see more information." |
| 1630 | 3625 _err "See: $_DEBUG_WIKI" |
| 3626 fi | |
| 3627 | |
| 3628 #run the post hook | |
| 3629 if [ "$_chk_post_hook" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3630 _info "Running post hook: '$_chk_post_hook'" |
| 1630 | 3631 if ! ( |
| 3632 cd "$DOMAIN_PATH" && eval "$_chk_post_hook" | |
| 3633 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3634 _err "Error encountered while running post hook." |
| 1630 | 3635 return 1 |
| 3636 fi | |
| 3637 fi | |
| 3638 | |
| 3639 #trigger the validation to flush the pending authz | |
| 3640 _debug2 "_chk_vlist" "$_chk_vlist" | |
| 3641 if [ "$_chk_vlist" ]; then | |
| 3642 ( | |
| 3643 _debug2 "start to deactivate authz" | |
| 3644 ventries=$(echo "$_chk_vlist" | tr "$dvsep" ' ') | |
| 3645 for ventry in $ventries; do | |
| 3646 d=$(echo "$ventry" | cut -d "$sep" -f 1) | |
| 3647 keyauthorization=$(echo "$ventry" | cut -d "$sep" -f 2) | |
| 3648 uri=$(echo "$ventry" | cut -d "$sep" -f 3) | |
| 3649 vtype=$(echo "$ventry" | cut -d "$sep" -f 4) | |
| 3650 _currentRoot=$(echo "$ventry" | cut -d "$sep" -f 5) | |
| 3651 __trigger_validation "$uri" "$keyauthorization" | |
| 3652 done | |
| 3653 ) | |
| 3654 fi | |
| 3655 | |
| 3656 if [ "$_ACME_IS_RENEW" = "1" ] && _hasfield "$Le_Webroot" "$W_DNS"; then | |
| 3657 _err "$_DNS_MANUAL_ERR" | |
| 3658 fi | |
| 3659 | |
| 3660 if [ "$DEBUG" ] && [ "$DEBUG" -gt "0" ]; then | |
| 3661 _debug "$(_dlg_versions)" | |
| 3662 fi | |
| 3663 | |
| 3664 } | |
| 3665 | |
| 3666 _on_issue_success() { | |
| 3667 _chk_post_hook="$1" | |
| 3668 _chk_renew_hook="$2" | |
| 3669 _debug _on_issue_success | |
| 3670 | |
| 3671 #run the post hook | |
| 3672 if [ "$_chk_post_hook" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3673 _info "Running post hook:'$_chk_post_hook'" |
| 1630 | 3674 if ! ( |
| 3675 export CERT_PATH | |
| 3676 export CERT_KEY_PATH | |
| 3677 export CA_CERT_PATH | |
| 3678 export CERT_FULLCHAIN_PATH | |
| 3679 export Le_Domain="$_main_domain" | |
| 3680 cd "$DOMAIN_PATH" && eval "$_chk_post_hook" | |
| 3681 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3682 _err "Error encountered while running post hook." |
| 1630 | 3683 return 1 |
| 3684 fi | |
| 3685 fi | |
| 3686 | |
| 3687 #run renew hook | |
| 3688 if [ "$_ACME_IS_RENEW" ] && [ "$_chk_renew_hook" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3689 _info "Running renew hook: '$_chk_renew_hook'" |
| 1630 | 3690 if ! ( |
| 3691 export CERT_PATH | |
| 3692 export CERT_KEY_PATH | |
| 3693 export CA_CERT_PATH | |
| 3694 export CERT_FULLCHAIN_PATH | |
| 3695 export Le_Domain="$_main_domain" | |
| 3696 cd "$DOMAIN_PATH" && eval "$_chk_renew_hook" | |
| 3697 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3698 _err "Error encountered while running renew hook." |
| 1630 | 3699 return 1 |
| 3700 fi | |
| 3701 fi | |
| 3702 | |
| 3703 if _hasfield "$Le_Webroot" "$W_DNS" && [ -z "$FORCE_DNS_MANUAL" ]; then | |
| 3704 _err "$_DNS_MANUAL_WARN" | |
| 3705 fi | |
| 3706 | |
| 3707 } | |
| 3708 | |
| 3709 #account_key_length eab-kid eab-hmac-key | |
| 3710 registeraccount() { | |
| 3711 _account_key_length="$1" | |
| 3712 _eab_id="$2" | |
| 3713 _eab_hmac_key="$3" | |
| 3714 _initpath | |
| 3715 _regAccount "$_account_key_length" "$_eab_id" "$_eab_hmac_key" | |
| 3716 } | |
| 3717 | |
| 3718 __calcAccountKeyHash() { | |
| 3719 [ -f "$ACCOUNT_KEY_PATH" ] && _digest sha256 <"$ACCOUNT_KEY_PATH" | |
| 3720 } | |
| 3721 | |
| 3722 __calc_account_thumbprint() { | |
| 3723 printf "%s" "$jwk" | tr -d ' ' | _digest "sha256" | _url_replace | |
| 3724 } | |
| 3725 | |
| 3726 _getAccountEmail() { | |
| 3727 if [ "$ACCOUNT_EMAIL" ]; then | |
| 3728 echo "$ACCOUNT_EMAIL" | |
| 3729 return 0 | |
| 3730 fi | |
| 3731 if [ -z "$CA_EMAIL" ]; then | |
| 3732 CA_EMAIL="$(_readcaconf CA_EMAIL)" | |
| 3733 fi | |
| 3734 if [ "$CA_EMAIL" ]; then | |
| 3735 echo "$CA_EMAIL" | |
| 3736 return 0 | |
| 3737 fi | |
| 3738 _readaccountconf "ACCOUNT_EMAIL" | |
| 3739 } | |
| 3740 | |
| 3741 #keylength | |
| 3742 _regAccount() { | |
| 3743 _initpath | |
| 3744 _reg_length="$1" | |
| 3745 _eab_id="$2" | |
| 3746 _eab_hmac_key="$3" | |
| 3747 _debug3 _regAccount "$_regAccount" | |
| 3748 _initAPI | |
| 3749 | |
| 3750 mkdir -p "$CA_DIR" | |
| 3751 | |
| 3752 if [ ! -f "$ACCOUNT_KEY_PATH" ]; then | |
| 3753 if ! _create_account_key "$_reg_length"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3754 _err "Error creating account key." |
| 1630 | 3755 return 1 |
| 3756 fi | |
| 3757 fi | |
| 3758 | |
| 3759 if ! _calcjwk "$ACCOUNT_KEY_PATH"; then | |
| 3760 return 1 | |
| 3761 fi | |
| 3762 if [ "$_eab_id" ] && [ "$_eab_hmac_key" ]; then | |
| 3763 _savecaconf CA_EAB_KEY_ID "$_eab_id" | |
| 3764 _savecaconf CA_EAB_HMAC_KEY "$_eab_hmac_key" | |
| 3765 fi | |
| 3766 _eab_id=$(_readcaconf "CA_EAB_KEY_ID") | |
| 3767 _eab_hmac_key=$(_readcaconf "CA_EAB_HMAC_KEY") | |
| 3768 _secure_debug3 _eab_id "$_eab_id" | |
| 3769 _secure_debug3 _eab_hmac_key "$_eab_hmac_key" | |
| 3770 _email="$(_getAccountEmail)" | |
| 3771 if [ "$_email" ]; then | |
| 3772 _savecaconf "CA_EMAIL" "$_email" | |
| 3773 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3774 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3775 if [ "$ACME_DIRECTORY" = "$CA_ZEROSSL" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3776 if [ -z "$_eab_id" ] || [ -z "$_eab_hmac_key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3777 _info "No EAB credentials found for ZeroSSL, let's obtain them" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3778 if [ -z "$_email" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3779 _info "$(__green "$PROJECT_NAME is using ZeroSSL as default CA now.")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3780 _info "$(__green "Please update your account with an email address first.")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3781 _info "$(__green "$PROJECT_ENTRY --register-account -m my@example.com")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3782 _info "See: $(__green "$_ZEROSSL_WIKI")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3783 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3784 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3785 _eabresp=$(_post "email=$_email" $_ZERO_EAB_ENDPOINT) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3786 if [ "$?" != "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3787 _debug2 "$_eabresp" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3788 _err "Cannot get EAB credentials from ZeroSSL." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3789 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3790 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3791 _secure_debug2 _eabresp "$_eabresp" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3792 _eab_id="$(echo "$_eabresp" | tr ',}' '\n\n' | grep '"eab_kid"' | cut -d : -f 2 | tr -d '"')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3793 _secure_debug2 _eab_id "$_eab_id" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3794 if [ -z "$_eab_id" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3795 _err "Cannot resolve _eab_id" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3796 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3797 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3798 _eab_hmac_key="$(echo "$_eabresp" | tr ',}' '\n\n' | grep '"eab_hmac_key"' | cut -d : -f 2 | tr -d '"')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3799 _secure_debug2 _eab_hmac_key "$_eab_hmac_key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3800 if [ -z "$_eab_hmac_key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3801 _err "Cannot resolve _eab_hmac_key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3802 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3803 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3804 _savecaconf CA_EAB_KEY_ID "$_eab_id" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3805 _savecaconf CA_EAB_HMAC_KEY "$_eab_hmac_key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3806 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3807 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3808 if [ "$_eab_id" ] && [ "$_eab_hmac_key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3809 eab_protected="{\"alg\":\"HS256\",\"kid\":\"$_eab_id\",\"url\":\"${ACME_NEW_ACCOUNT}\"}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3810 _debug3 eab_protected "$eab_protected" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3811 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3812 eab_protected64=$(printf "%s" "$eab_protected" | _base64 | _url_replace) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3813 _debug3 eab_protected64 "$eab_protected64" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3814 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3815 eab_payload64=$(printf "%s" "$jwk" | _base64 | _url_replace) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3816 _debug3 eab_payload64 "$eab_payload64" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3817 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3818 eab_sign_t="$eab_protected64.$eab_payload64" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3819 _debug3 eab_sign_t "$eab_sign_t" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3820 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3821 key_hex="$(_durl_replace_base64 "$_eab_hmac_key" | _dbase64 | _hex_dump | tr -d ' ')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3822 _debug3 key_hex "$key_hex" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3823 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3824 eab_signature=$(printf "%s" "$eab_sign_t" | _hmac sha256 $key_hex | _base64 | _url_replace) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3825 _debug3 eab_signature "$eab_signature" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3826 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3827 externalBinding=",\"externalAccountBinding\":{\"protected\":\"$eab_protected64\", \"payload\":\"$eab_payload64\", \"signature\":\"$eab_signature\"}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3828 _debug3 externalBinding "$externalBinding" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3829 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3830 if [ "$_email" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3831 email_sg="\"contact\": [\"mailto:$_email\"], " |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3832 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3833 regjson="{$email_sg\"termsOfServiceAgreed\": true$externalBinding}" |
| 1630 | 3834 |
| 3835 _info "Registering account: $ACME_DIRECTORY" | |
| 3836 | |
| 3837 if ! _send_signed_request "${ACME_NEW_ACCOUNT}" "$regjson"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3838 _err "Error registering account: $response" |
| 1630 | 3839 return 1 |
| 3840 fi | |
| 3841 | |
| 3842 _eabAlreadyBound="" | |
| 3843 if [ "$code" = "" ] || [ "$code" = '201' ]; then | |
| 3844 echo "$response" >"$ACCOUNT_JSON_PATH" | |
| 3845 _info "Registered" | |
| 3846 elif [ "$code" = '409' ] || [ "$code" = '200' ]; then | |
| 3847 _info "Already registered" | |
| 3848 elif [ "$code" = '400' ] && _contains "$response" 'The account is not awaiting external account binding'; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3849 _info "EAB already registered" |
| 1630 | 3850 _eabAlreadyBound=1 |
| 3851 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3852 _err "Account registration error: $response" |
| 1630 | 3853 return 1 |
| 3854 fi | |
| 3855 | |
| 3856 if [ -z "$_eabAlreadyBound" ]; then | |
| 3857 _debug2 responseHeaders "$responseHeaders" | |
| 3858 _accUri="$(echo "$responseHeaders" | grep -i "^Location:" | _head_n 1 | cut -d ':' -f 2- | tr -d "\r\n ")" | |
| 3859 _debug "_accUri" "$_accUri" | |
| 3860 if [ -z "$_accUri" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3861 _err "Cannot find account id url." |
| 1630 | 3862 _err "$responseHeaders" |
| 3863 return 1 | |
| 3864 fi | |
| 3865 _savecaconf "ACCOUNT_URL" "$_accUri" | |
| 3866 else | |
| 3867 ACCOUNT_URL="$(_readcaconf ACCOUNT_URL)" | |
| 3868 fi | |
| 3869 export ACCOUNT_URL="$_accUri" | |
| 3870 | |
| 3871 CA_KEY_HASH="$(__calcAccountKeyHash)" | |
| 3872 _debug "Calc CA_KEY_HASH" "$CA_KEY_HASH" | |
| 3873 _savecaconf CA_KEY_HASH "$CA_KEY_HASH" | |
| 3874 | |
| 3875 if [ "$code" = '403' ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3876 _err "It seems that the account key has been deactivated, please use a new account key." |
| 1630 | 3877 return 1 |
| 3878 fi | |
| 3879 | |
| 3880 ACCOUNT_THUMBPRINT="$(__calc_account_thumbprint)" | |
| 3881 _info "ACCOUNT_THUMBPRINT" "$ACCOUNT_THUMBPRINT" | |
| 3882 } | |
| 3883 | |
| 3884 #implement updateaccount | |
| 3885 updateaccount() { | |
| 3886 _initpath | |
| 3887 | |
| 3888 if [ ! -f "$ACCOUNT_KEY_PATH" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3889 _err "Account key not found at: $ACCOUNT_KEY_PATH" |
| 1630 | 3890 return 1 |
| 3891 fi | |
| 3892 | |
| 3893 _accUri=$(_readcaconf "ACCOUNT_URL") | |
| 3894 _debug _accUri "$_accUri" | |
| 3895 | |
| 3896 if [ -z "$_accUri" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3897 _err "The account URL is empty, please run '--update-account' first to update the account info, then try again." |
| 1630 | 3898 return 1 |
| 3899 fi | |
| 3900 | |
| 3901 if ! _calcjwk "$ACCOUNT_KEY_PATH"; then | |
| 3902 return 1 | |
| 3903 fi | |
| 3904 _initAPI | |
| 3905 | |
| 3906 _email="$(_getAccountEmail)" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3907 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3908 if [ "$_email" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3909 updjson='{"contact": ["mailto:'$_email'"]}' |
| 1630 | 3910 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3911 updjson='{"contact": []}' |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3912 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3913 |
| 1630 | 3914 _send_signed_request "$_accUri" "$updjson" |
| 3915 | |
| 3916 if [ "$code" = '200' ]; then | |
| 3917 echo "$response" >"$ACCOUNT_JSON_PATH" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3918 _info "Account update success for $_accUri." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3919 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3920 ACCOUNT_THUMBPRINT="$(__calc_account_thumbprint)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3921 _info "ACCOUNT_THUMBPRINT" "$ACCOUNT_THUMBPRINT" |
| 1630 | 3922 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3923 _info "An error occurred and the account was not updated." |
| 1630 | 3924 return 1 |
| 3925 fi | |
| 3926 } | |
| 3927 | |
| 3928 #Implement deactivate account | |
| 3929 deactivateaccount() { | |
| 3930 _initpath | |
| 3931 | |
| 3932 if [ ! -f "$ACCOUNT_KEY_PATH" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3933 _err "Account key not found at: $ACCOUNT_KEY_PATH" |
| 1630 | 3934 return 1 |
| 3935 fi | |
| 3936 | |
| 3937 _accUri=$(_readcaconf "ACCOUNT_URL") | |
| 3938 _debug _accUri "$_accUri" | |
| 3939 | |
| 3940 if [ -z "$_accUri" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3941 _err "The account URL is empty, please run '--update-account' first to update the account info, then try again." |
| 1630 | 3942 return 1 |
| 3943 fi | |
| 3944 | |
| 3945 if ! _calcjwk "$ACCOUNT_KEY_PATH"; then | |
| 3946 return 1 | |
| 3947 fi | |
| 3948 _initAPI | |
| 3949 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3950 _djson="{\"status\":\"deactivated\"}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3951 |
| 1630 | 3952 if _send_signed_request "$_accUri" "$_djson" && _contains "$response" '"deactivated"'; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3953 _info "Successfully deactivated account $_accUri." |
| 1630 | 3954 _accid=$(echo "$response" | _egrep_o "\"id\" *: *[^,]*," | cut -d : -f 2 | tr -d ' ,') |
| 3955 elif [ "$code" = "403" ]; then | |
| 3956 _info "The account is already deactivated." | |
| 3957 _accid=$(_getfield "$_accUri" "999" "/") | |
| 3958 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3959 _err "Account deactivation failed for $_accUri." |
| 1630 | 3960 return 1 |
| 3961 fi | |
| 3962 | |
| 3963 _debug "Account id: $_accid" | |
| 3964 if [ "$_accid" ]; then | |
| 3965 _deactivated_account_path="$CA_DIR/deactivated/$_accid" | |
| 3966 _debug _deactivated_account_path "$_deactivated_account_path" | |
| 3967 if mkdir -p "$_deactivated_account_path"; then | |
| 3968 _info "Moving deactivated account info to $_deactivated_account_path/" | |
| 3969 mv "$CA_CONF" "$_deactivated_account_path/" | |
| 3970 mv "$ACCOUNT_JSON_PATH" "$_deactivated_account_path/" | |
| 3971 mv "$ACCOUNT_KEY_PATH" "$_deactivated_account_path/" | |
| 3972 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
3973 _err "Cannot create dir: $_deactivated_account_path, try to remove the deactivated account key." |
| 1630 | 3974 rm -f "$CA_CONF" |
| 3975 rm -f "$ACCOUNT_JSON_PATH" | |
| 3976 rm -f "$ACCOUNT_KEY_PATH" | |
| 3977 fi | |
| 3978 fi | |
| 3979 } | |
| 3980 | |
| 3981 # domain folder file | |
| 3982 _findHook() { | |
| 3983 _hookdomain="$1" | |
| 3984 _hookcat="$2" | |
| 3985 _hookname="$3" | |
| 3986 | |
| 3987 if [ -f "$_SCRIPT_HOME/$_hookcat/$_hookname" ]; then | |
| 3988 d_api="$_SCRIPT_HOME/$_hookcat/$_hookname" | |
| 3989 elif [ -f "$_SCRIPT_HOME/$_hookcat/$_hookname.sh" ]; then | |
| 3990 d_api="$_SCRIPT_HOME/$_hookcat/$_hookname.sh" | |
| 3991 elif [ "$_hookdomain" ] && [ -f "$LE_WORKING_DIR/$_hookdomain/$_hookname" ]; then | |
| 3992 d_api="$LE_WORKING_DIR/$_hookdomain/$_hookname" | |
| 3993 elif [ "$_hookdomain" ] && [ -f "$LE_WORKING_DIR/$_hookdomain/$_hookname.sh" ]; then | |
| 3994 d_api="$LE_WORKING_DIR/$_hookdomain/$_hookname.sh" | |
| 3995 elif [ -f "$LE_WORKING_DIR/$_hookname" ]; then | |
| 3996 d_api="$LE_WORKING_DIR/$_hookname" | |
| 3997 elif [ -f "$LE_WORKING_DIR/$_hookname.sh" ]; then | |
| 3998 d_api="$LE_WORKING_DIR/$_hookname.sh" | |
| 3999 elif [ -f "$LE_WORKING_DIR/$_hookcat/$_hookname" ]; then | |
| 4000 d_api="$LE_WORKING_DIR/$_hookcat/$_hookname" | |
| 4001 elif [ -f "$LE_WORKING_DIR/$_hookcat/$_hookname.sh" ]; then | |
| 4002 d_api="$LE_WORKING_DIR/$_hookcat/$_hookname.sh" | |
| 4003 fi | |
| 4004 | |
| 4005 printf "%s" "$d_api" | |
| 4006 } | |
| 4007 | |
| 4008 #domain | |
| 4009 __get_domain_new_authz() { | |
| 4010 _gdnd="$1" | |
| 4011 _info "Getting new-authz for domain" "$_gdnd" | |
| 4012 _initAPI | |
| 4013 _Max_new_authz_retry_times=5 | |
| 4014 _authz_i=0 | |
| 4015 while [ "$_authz_i" -lt "$_Max_new_authz_retry_times" ]; do | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4016 _debug "Trying new-authz, attempt number $_authz_i." |
| 1630 | 4017 if ! _send_signed_request "${ACME_NEW_AUTHZ}" "{\"resource\": \"new-authz\", \"identifier\": {\"type\": \"dns\", \"value\": \"$(_idn "$_gdnd")\"}}"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4018 _err "Cannot get new authz for domain." |
| 1630 | 4019 return 1 |
| 4020 fi | |
| 4021 if _contains "$response" "No registration exists matching provided key"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4022 _err "There has been an error, but it might now be resolved, please try again." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4023 _err "If you see this message for a second time, please report this as a bug: $(__green "$PROJECT")" |
| 1630 | 4024 _clearcaconf "CA_KEY_HASH" |
| 4025 break | |
| 4026 fi | |
| 4027 if ! _contains "$response" "An error occurred while processing your request"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4028 _info "new-authz request successful." |
| 1630 | 4029 break |
| 4030 fi | |
| 4031 _authz_i="$(_math "$_authz_i" + 1)" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4032 _info "The server is busy, sleeping for $_authz_i seconds and retrying." |
| 1630 | 4033 _sleep "$_authz_i" |
| 4034 done | |
| 4035 | |
| 4036 if [ "$_authz_i" = "$_Max_new_authz_retry_times" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4037 _err "new-authz has been retried $_Max_new_authz_retry_times times, stopping." |
| 1630 | 4038 fi |
| 4039 | |
| 4040 if [ "$code" ] && [ "$code" != '201' ]; then | |
| 4041 _err "new-authz error: $response" | |
| 4042 return 1 | |
| 4043 fi | |
| 4044 | |
| 4045 } | |
| 4046 | |
| 4047 #uri keyAuthorization | |
| 4048 __trigger_validation() { | |
| 4049 _debug2 "Trigger domain validation." | |
| 4050 _t_url="$1" | |
| 4051 _debug2 _t_url "$_t_url" | |
| 4052 _t_key_authz="$2" | |
| 4053 _debug2 _t_key_authz "$_t_key_authz" | |
| 4054 _t_vtype="$3" | |
| 4055 _debug2 _t_vtype "$_t_vtype" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4056 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4057 _send_signed_request "$_t_url" "{}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4058 |
| 1630 | 4059 } |
| 4060 | |
| 4061 #endpoint domain type | |
| 4062 _ns_lookup_impl() { | |
| 4063 _ns_ep="$1" | |
| 4064 _ns_domain="$2" | |
| 4065 _ns_type="$3" | |
| 4066 _debug2 "_ns_ep" "$_ns_ep" | |
| 4067 _debug2 "_ns_domain" "$_ns_domain" | |
| 4068 _debug2 "_ns_type" "$_ns_type" | |
| 4069 | |
| 4070 response="$(_H1="accept: application/dns-json" _get "$_ns_ep?name=$_ns_domain&type=$_ns_type")" | |
| 4071 _ret=$? | |
| 4072 _debug2 "response" "$response" | |
| 4073 if [ "$_ret" != "0" ]; then | |
| 4074 return $_ret | |
| 4075 fi | |
| 4076 _answers="$(echo "$response" | tr '{}' '<>' | _egrep_o '"Answer":\[[^]]*]' | tr '<>' '\n\n')" | |
| 4077 _debug2 "_answers" "$_answers" | |
| 4078 echo "$_answers" | |
| 4079 } | |
| 4080 | |
| 4081 #domain, type | |
| 4082 _ns_lookup_cf() { | |
| 4083 _cf_ld="$1" | |
| 4084 _cf_ld_type="$2" | |
| 4085 _cf_ep="https://cloudflare-dns.com/dns-query" | |
| 4086 _ns_lookup_impl "$_cf_ep" "$_cf_ld" "$_cf_ld_type" | |
| 4087 } | |
| 4088 | |
| 4089 #domain, type | |
| 4090 _ns_purge_cf() { | |
| 4091 _cf_d="$1" | |
| 4092 _cf_d_type="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4093 _debug "Purging Cloudflare $_cf_d_type record for domain $_cf_d" |
| 1630 | 4094 _cf_purl="https://cloudflare-dns.com/api/v1/purge?domain=$_cf_d&type=$_cf_d_type" |
| 4095 response="$(_post "" "$_cf_purl")" | |
| 4096 _debug2 response "$response" | |
| 4097 } | |
| 4098 | |
| 4099 #checks if cf server is available | |
| 4100 _ns_is_available_cf() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4101 if _get "https://cloudflare-dns.com" "" 10 >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4102 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4103 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4104 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4105 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4106 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4107 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4108 _ns_is_available_google() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4109 if _get "https://dns.google" "" 10 >/dev/null; then |
| 1630 | 4110 return 0 |
| 4111 else | |
| 4112 return 1 | |
| 4113 fi | |
| 4114 } | |
| 4115 | |
| 4116 #domain, type | |
| 4117 _ns_lookup_google() { | |
| 4118 _cf_ld="$1" | |
| 4119 _cf_ld_type="$2" | |
| 4120 _cf_ep="https://dns.google/resolve" | |
| 4121 _ns_lookup_impl "$_cf_ep" "$_cf_ld" "$_cf_ld_type" | |
| 4122 } | |
| 4123 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4124 _ns_is_available_ali() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4125 if _get "https://dns.alidns.com" "" 10 >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4126 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4127 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4128 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4129 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4130 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4131 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4132 #domain, type |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4133 _ns_lookup_ali() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4134 _cf_ld="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4135 _cf_ld_type="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4136 _cf_ep="https://dns.alidns.com/resolve" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4137 _ns_lookup_impl "$_cf_ep" "$_cf_ld" "$_cf_ld_type" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4138 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4139 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4140 _ns_is_available_dp() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4141 if _get "https://doh.pub" "" 10 >/dev/null; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4142 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4143 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4144 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4145 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4146 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4147 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4148 #dnspod |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4149 _ns_lookup_dp() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4150 _cf_ld="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4151 _cf_ld_type="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4152 _cf_ep="https://doh.pub/dns-query" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4153 _ns_lookup_impl "$_cf_ep" "$_cf_ld" "$_cf_ld_type" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4154 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4155 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4156 _ns_select_doh() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4157 if [ -z "$DOH_USE" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4158 _debug "Detecting DNS server first." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4159 if _ns_is_available_cf; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4160 _debug "Using Cloudflare doh server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4161 export DOH_USE=$DOH_CLOUDFLARE |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4162 elif _ns_is_available_google; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4163 _debug "Using Google DOH server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4164 export DOH_USE=$DOH_GOOGLE |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4165 elif _ns_is_available_ali; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4166 _debug "Using Aliyun DOH server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4167 export DOH_USE=$DOH_ALI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4168 elif _ns_is_available_dp; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4169 _debug "Using DNS POD DOH server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4170 export DOH_USE=$DOH_DP |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4171 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4172 _err "No DOH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4173 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4174 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4175 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4176 |
| 1630 | 4177 #domain, type |
| 4178 _ns_lookup() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4179 _ns_select_doh |
| 1630 | 4180 if [ "$DOH_USE" = "$DOH_CLOUDFLARE" ] || [ -z "$DOH_USE" ]; then |
| 4181 _ns_lookup_cf "$@" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4182 elif [ "$DOH_USE" = "$DOH_GOOGLE" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4183 _ns_lookup_google "$@" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4184 elif [ "$DOH_USE" = "$DOH_ALI" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4185 _ns_lookup_ali "$@" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4186 elif [ "$DOH_USE" = "$DOH_DP" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4187 _ns_lookup_dp "$@" |
| 1630 | 4188 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4189 _err "Unknown DOH provider: DOH_USE=$DOH_USE" |
| 1630 | 4190 fi |
| 4191 | |
| 4192 } | |
| 4193 | |
| 4194 #txtdomain, alias, txt | |
| 4195 __check_txt() { | |
| 4196 _c_txtdomain="$1" | |
| 4197 _c_aliasdomain="$2" | |
| 4198 _c_txt="$3" | |
| 4199 _debug "_c_txtdomain" "$_c_txtdomain" | |
| 4200 _debug "_c_aliasdomain" "$_c_aliasdomain" | |
| 4201 _debug "_c_txt" "$_c_txt" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4202 _ns_select_doh |
| 1630 | 4203 _answers="$(_ns_lookup "$_c_aliasdomain" TXT)" |
| 4204 _contains "$_answers" "$_c_txt" | |
| 4205 | |
| 4206 } | |
| 4207 | |
| 4208 #txtdomain | |
| 4209 __purge_txt() { | |
| 4210 _p_txtdomain="$1" | |
| 4211 _debug _p_txtdomain "$_p_txtdomain" | |
| 4212 if [ "$DOH_USE" = "$DOH_CLOUDFLARE" ] || [ -z "$DOH_USE" ]; then | |
| 4213 _ns_purge_cf "$_p_txtdomain" "TXT" | |
| 4214 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4215 _debug "No purge API for this DOH API, just sleeping for 5 seconds" |
| 1630 | 4216 _sleep 5 |
| 4217 fi | |
| 4218 | |
| 4219 } | |
| 4220 | |
| 4221 #wait and check each dns entries | |
| 4222 _check_dns_entries() { | |
| 4223 _success_txt="," | |
| 4224 _end_time="$(_time)" | |
| 4225 _end_time="$(_math "$_end_time" + 1200)" #let's check no more than 20 minutes. | |
| 4226 | |
| 4227 while [ "$(_time)" -le "$_end_time" ]; do | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4228 _info "You can use '--dnssleep' to disable public dns checks." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4229 _info "See: $_DNSCHECK_WIKI" |
| 1630 | 4230 _left="" |
| 4231 for entry in $dns_entries; do | |
| 4232 d=$(_getfield "$entry" 1) | |
| 4233 txtdomain=$(_getfield "$entry" 2) | |
| 4234 txtdomain=$(_idn "$txtdomain") | |
| 4235 aliasDomain=$(_getfield "$entry" 3) | |
| 4236 aliasDomain=$(_idn "$aliasDomain") | |
| 4237 txt=$(_getfield "$entry" 5) | |
| 4238 d_api=$(_getfield "$entry" 6) | |
| 4239 _debug "d" "$d" | |
| 4240 _debug "txtdomain" "$txtdomain" | |
| 4241 _debug "aliasDomain" "$aliasDomain" | |
| 4242 _debug "txt" "$txt" | |
| 4243 _debug "d_api" "$d_api" | |
| 4244 _info "Checking $d for $aliasDomain" | |
| 4245 if _contains "$_success_txt" ",$txt,"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4246 _info "Already succeeded, continuing." |
| 1630 | 4247 continue |
| 4248 fi | |
| 4249 | |
| 4250 if __check_txt "$txtdomain" "$aliasDomain" "$txt"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4251 _info "Success for domain $d '$aliasDomain'." |
| 1630 | 4252 _success_txt="$_success_txt,$txt," |
| 4253 continue | |
| 4254 fi | |
| 4255 _left=1 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4256 _info "Not valid yet, let's wait for 10 seconds then check the next one." |
| 1630 | 4257 __purge_txt "$txtdomain" |
| 4258 if [ "$txtdomain" != "$aliasDomain" ]; then | |
| 4259 __purge_txt "$aliasDomain" | |
| 4260 fi | |
| 4261 _sleep 10 | |
| 4262 done | |
| 4263 if [ "$_left" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4264 _info "Let's wait for 10 seconds and check again". |
| 1630 | 4265 _sleep 10 |
| 4266 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4267 _info "All checks succeeded" |
| 1630 | 4268 return 0 |
| 4269 fi | |
| 4270 done | |
| 4271 _info "Timed out waiting for DNS." | |
| 4272 return 1 | |
| 4273 | |
| 4274 } | |
| 4275 | |
| 4276 #file | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4277 _get_chain_issuers() { |
| 1630 | 4278 _cfile="$1" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4279 if _contains "$(${ACME_OPENSSL_BIN:-openssl} help crl2pkcs7 2>&1)" "Usage: crl2pkcs7" || _contains "$(${ACME_OPENSSL_BIN:-openssl} crl2pkcs7 -help 2>&1)" "Usage: crl2pkcs7" || _contains "$(${ACME_OPENSSL_BIN:-openssl} crl2pkcs7 help 2>&1)" "unknown option help"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4280 ${ACME_OPENSSL_BIN:-openssl} crl2pkcs7 -nocrl -certfile $_cfile | ${ACME_OPENSSL_BIN:-openssl} pkcs7 -print_certs -text -noout | grep -i 'Issuer:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2 |
| 1630 | 4281 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4282 _cindex=1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4283 for _startn in $(grep -n -- "$BEGIN_CERT" "$_cfile" | cut -d : -f 1); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4284 _endn="$(grep -n -- "$END_CERT" "$_cfile" | cut -d : -f 1 | _head_n $_cindex | _tail_n 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4285 _debug2 "_startn" "$_startn" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4286 _debug2 "_endn" "$_endn" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4287 if [ "$DEBUG" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4288 _debug2 "cert$_cindex" "$(sed -n "$_startn,${_endn}p" "$_cfile")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4289 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4290 sed -n "$_startn,${_endn}p" "$_cfile" | ${ACME_OPENSSL_BIN:-openssl} x509 -text -noout | grep 'Issuer:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2 | sed "s/ *\(.*\)/\1/" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4291 _cindex=$(_math $_cindex + 1) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4292 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4293 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4294 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4295 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4296 # |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4297 _get_chain_subjects() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4298 _cfile="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4299 if _contains "$(${ACME_OPENSSL_BIN:-openssl} help crl2pkcs7 2>&1)" "Usage: crl2pkcs7" || _contains "$(${ACME_OPENSSL_BIN:-openssl} crl2pkcs7 -help 2>&1)" "Usage: crl2pkcs7" || _contains "$(${ACME_OPENSSL_BIN:-openssl} crl2pkcs7 help 2>&1)" "unknown option help"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4300 ${ACME_OPENSSL_BIN:-openssl} crl2pkcs7 -nocrl -certfile $_cfile | ${ACME_OPENSSL_BIN:-openssl} pkcs7 -print_certs -text -noout | grep -i 'Subject:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4301 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4302 _cindex=1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4303 for _startn in $(grep -n -- "$BEGIN_CERT" "$_cfile" | cut -d : -f 1); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4304 _endn="$(grep -n -- "$END_CERT" "$_cfile" | cut -d : -f 1 | _head_n $_cindex | _tail_n 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4305 _debug2 "_startn" "$_startn" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4306 _debug2 "_endn" "$_endn" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4307 if [ "$DEBUG" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4308 _debug2 "cert$_cindex" "$(sed -n "$_startn,${_endn}p" "$_cfile")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4309 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4310 sed -n "$_startn,${_endn}p" "$_cfile" | ${ACME_OPENSSL_BIN:-openssl} x509 -text -noout | grep -i 'Subject:' | _egrep_o "CN *=[^,]*" | cut -d = -f 2 | sed "s/ *\(.*\)/\1/" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4311 _cindex=$(_math $_cindex + 1) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4312 done |
| 1630 | 4313 fi |
| 4314 } | |
| 4315 | |
| 4316 #cert issuer | |
| 4317 _match_issuer() { | |
| 4318 _cfile="$1" | |
| 4319 _missuer="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4320 _fissuers="$(_get_chain_issuers $_cfile)" |
| 1630 | 4321 _debug2 _fissuers "$_fissuers" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4322 _rootissuer="$(echo "$_fissuers" | _lower_case | _tail_n 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4323 _debug2 _rootissuer "$_rootissuer" |
| 1630 | 4324 _missuer="$(echo "$_missuer" | _lower_case)" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4325 _contains "$_rootissuer" "$_missuer" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4326 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4327 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4328 #ip |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4329 _isIPv4() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4330 for seg in $(echo "$1" | tr '.' ' '); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4331 _debug2 seg "$seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4332 if [ "$(echo "$seg" | tr -d '[0-9]')" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4333 #not all number |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4334 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4335 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4336 if [ $seg -ge 0 ] && [ $seg -lt 256 ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4337 continue |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4338 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4339 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4340 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4341 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4342 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4343 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4344 #ip6 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4345 _isIPv6() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4346 _contains "$1" ":" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4347 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4348 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4349 #ip |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4350 _isIP() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4351 _isIPv4 "$1" || _isIPv6 "$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4352 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4353 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4354 #identifier |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4355 _getIdType() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4356 if _isIP "$1"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4357 echo "$ID_TYPE_IP" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4358 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4359 echo "$ID_TYPE_DNS" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4360 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4361 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4362 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4363 # beginTime dateTo |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4364 # beginTime is full string format("2022-04-01T08:10:33Z"), beginTime can be empty, to use current time |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4365 # dateTo can be ether in full string format("2022-04-01T08:10:33Z") or in delta format(+5d or +20h) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4366 _convertValidaty() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4367 _beginTime="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4368 _dateTo="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4369 _debug2 "_beginTime" "$_beginTime" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4370 _debug2 "_dateTo" "$_dateTo" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4371 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4372 if _startswith "$_dateTo" "+"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4373 _v_begin=$(_time) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4374 if [ "$_beginTime" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4375 _v_begin="$(_date2time "$_beginTime")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4376 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4377 _debug2 "_v_begin" "$_v_begin" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4378 if _endswith "$_dateTo" "h"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4379 _v_end=$(_math "$_v_begin + 60 * 60 * $(echo "$_dateTo" | tr -d '+h')") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4380 elif _endswith "$_dateTo" "d"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4381 _v_end=$(_math "$_v_begin + 60 * 60 * 24 * $(echo "$_dateTo" | tr -d '+d')") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4382 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4383 _err "Unrecognized format for _dateTo: $_dateTo" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4384 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4385 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4386 _debug2 "_v_end" "$_v_end" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4387 _time2str "$_v_end" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4388 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4389 if [ "$(_time)" -gt "$(_date2time "$_dateTo")" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4390 _err "The validity end date is in the past: _dateTo = $_dateTo" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4391 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4392 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4393 echo "$_dateTo" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4394 fi |
| 1630 | 4395 } |
| 4396 | |
| 4397 #webroot, domain domainlist keylength | |
| 4398 issue() { | |
| 4399 if [ -z "$2" ]; then | |
| 4400 _usage "Usage: $PROJECT_ENTRY --issue --domain <domain.tld> --webroot <directory>" | |
| 4401 return 1 | |
| 4402 fi | |
| 4403 if [ -z "$1" ]; then | |
| 4404 _usage "Please specify at least one validation method: '--webroot', '--standalone', '--apache', '--nginx' or '--dns' etc." | |
| 4405 return 1 | |
| 4406 fi | |
| 4407 _web_roots="$1" | |
| 4408 _main_domain="$2" | |
| 4409 _alt_domains="$3" | |
| 4410 | |
| 4411 if _contains "$_main_domain" ","; then | |
| 4412 _main_domain=$(echo "$2,$3" | cut -d , -f 1) | |
| 4413 _alt_domains=$(echo "$2,$3" | cut -d , -f 2- | sed "s/,${NO_VALUE}$//") | |
| 4414 fi | |
| 4415 _debug _main_domain "$_main_domain" | |
| 4416 _debug _alt_domains "$_alt_domains" | |
| 4417 | |
| 4418 _key_length="$4" | |
| 4419 _real_cert="$5" | |
| 4420 _real_key="$6" | |
| 4421 _real_ca="$7" | |
| 4422 _reload_cmd="$8" | |
| 4423 _real_fullchain="$9" | |
| 4424 _pre_hook="${10}" | |
| 4425 _post_hook="${11}" | |
| 4426 _renew_hook="${12}" | |
| 4427 _local_addr="${13}" | |
| 4428 _challenge_alias="${14}" | |
| 4429 _preferred_chain="${15}" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4430 _valid_from="${16}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4431 _valid_to="${17}" |
| 1630 | 4432 |
| 4433 if [ -z "$_ACME_IS_RENEW" ]; then | |
| 4434 _initpath "$_main_domain" "$_key_length" | |
| 4435 mkdir -p "$DOMAIN_PATH" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4436 elif ! _hasfield "$_web_roots" "$W_DNS"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4437 Le_OrderFinalize="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4438 Le_LinkOrder="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4439 Le_LinkCert="" |
| 1630 | 4440 fi |
| 4441 | |
| 4442 if _hasfield "$_web_roots" "$W_DNS" && [ -z "$FORCE_DNS_MANUAL" ]; then | |
| 4443 _err "$_DNS_MANUAL_ERROR" | |
| 4444 return 1 | |
| 4445 fi | |
| 4446 | |
| 4447 if [ -f "$DOMAIN_CONF" ]; then | |
| 4448 Le_NextRenewTime=$(_readdomainconf Le_NextRenewTime) | |
| 4449 _debug Le_NextRenewTime "$Le_NextRenewTime" | |
| 4450 if [ -z "$FORCE" ] && [ "$Le_NextRenewTime" ] && [ "$(_time)" -lt "$Le_NextRenewTime" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4451 _valid_to_saved=$(_readdomainconf Le_Valid_to) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4452 if [ "$_valid_to_saved" ] && ! _startswith "$_valid_to_saved" "+"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4453 _info "The domain is set to be valid to: $_valid_to_saved" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4454 _info "It cannot be renewed automatically" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4455 _info "See: $_VALIDITY_WIKI" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4456 return $RENEW_SKIP |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4457 fi |
| 1630 | 4458 _saved_domain=$(_readdomainconf Le_Domain) |
| 4459 _debug _saved_domain "$_saved_domain" | |
| 4460 _saved_alt=$(_readdomainconf Le_Alt) | |
| 4461 _debug _saved_alt "$_saved_alt" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4462 _normized_saved_domains="$(echo "$_saved_domain,$_saved_alt" | tr "," "\n" | sort | tr '\n' ',')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4463 _debug _normized_saved_domains "$_normized_saved_domains" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4464 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4465 _normized_domains="$(echo "$_main_domain,$_alt_domains" | tr "," "\n" | sort | tr '\n' ',')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4466 _debug _normized_domains "$_normized_domains" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4467 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4468 if [ "$_normized_saved_domains" = "$_normized_domains" ]; then |
| 1630 | 4469 _info "Domains not changed." |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4470 _info "Skipping. Next renewal time is: $(__green "$(_readdomainconf Le_NextRenewTimeStr)")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4471 _info "Add '$(__red '--force')' to force renewal." |
| 1630 | 4472 return $RENEW_SKIP |
| 4473 else | |
| 4474 _info "Domains have changed." | |
| 4475 fi | |
| 4476 fi | |
| 4477 fi | |
| 4478 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4479 _debug "Using ACME_DIRECTORY: $ACME_DIRECTORY" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4480 if ! _initAPI; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4481 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4482 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4483 |
| 1630 | 4484 _savedomainconf "Le_Domain" "$_main_domain" |
| 4485 _savedomainconf "Le_Alt" "$_alt_domains" | |
| 4486 _savedomainconf "Le_Webroot" "$_web_roots" | |
| 4487 | |
| 4488 _savedomainconf "Le_PreHook" "$_pre_hook" "base64" | |
| 4489 _savedomainconf "Le_PostHook" "$_post_hook" "base64" | |
| 4490 _savedomainconf "Le_RenewHook" "$_renew_hook" "base64" | |
| 4491 | |
| 4492 if [ "$_local_addr" ]; then | |
| 4493 _savedomainconf "Le_LocalAddress" "$_local_addr" | |
| 4494 else | |
| 4495 _cleardomainconf "Le_LocalAddress" | |
| 4496 fi | |
| 4497 if [ "$_challenge_alias" ]; then | |
| 4498 _savedomainconf "Le_ChallengeAlias" "$_challenge_alias" | |
| 4499 else | |
| 4500 _cleardomainconf "Le_ChallengeAlias" | |
| 4501 fi | |
| 4502 if [ "$_preferred_chain" ]; then | |
| 4503 _savedomainconf "Le_Preferred_Chain" "$_preferred_chain" "base64" | |
| 4504 else | |
| 4505 _cleardomainconf "Le_Preferred_Chain" | |
| 4506 fi | |
| 4507 | |
| 4508 Le_API="$ACME_DIRECTORY" | |
| 4509 _savedomainconf "Le_API" "$Le_API" | |
| 4510 | |
| 4511 _info "Using CA: $ACME_DIRECTORY" | |
| 4512 if [ "$_alt_domains" = "$NO_VALUE" ]; then | |
| 4513 _alt_domains="" | |
| 4514 fi | |
| 4515 | |
| 4516 if ! _on_before_issue "$_web_roots" "$_main_domain" "$_alt_domains" "$_pre_hook" "$_local_addr"; then | |
| 4517 _err "_on_before_issue." | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4518 _on_issue_err "$_post_hook" |
| 1630 | 4519 return 1 |
| 4520 fi | |
| 4521 | |
| 4522 _saved_account_key_hash="$(_readcaconf "CA_KEY_HASH")" | |
| 4523 _debug2 _saved_account_key_hash "$_saved_account_key_hash" | |
| 4524 | |
| 4525 if [ -z "$ACCOUNT_URL" ] || [ -z "$_saved_account_key_hash" ] || [ "$_saved_account_key_hash" != "$(__calcAccountKeyHash)" ]; then | |
| 4526 if ! _regAccount "$_accountkeylength"; then | |
| 4527 _on_issue_err "$_post_hook" | |
| 4528 return 1 | |
| 4529 fi | |
| 4530 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4531 _debug "_saved_account_key_hash was not changed, skipping account registration." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4532 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4533 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4534 export Le_Next_Domain_Key="$CERT_KEY_PATH.next" |
| 1630 | 4535 if [ -f "$CSR_PATH" ] && [ ! -f "$CERT_KEY_PATH" ]; then |
| 4536 _info "Signing from existing CSR." | |
| 4537 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4538 # When renewing from an old version, the empty Le_Keylength means 2048. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4539 # Note, do not use DEFAULT_DOMAIN_KEY_LENGTH as that value may change over |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4540 # time but an empty value implies 2048 specifically. |
| 1630 | 4541 _key=$(_readdomainconf Le_Keylength) |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4542 if [ -z "$_key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4543 _key=2048 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4544 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4545 _debug "Read key length: $_key" |
| 1630 | 4546 if [ ! -f "$CERT_KEY_PATH" ] || [ "$_key_length" != "$_key" ] || [ "$Le_ForceNewDomainKey" = "1" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4547 if [ "$Le_ForceNewDomainKey" = "1" ] && [ -f "$Le_Next_Domain_Key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4548 _info "Using pre-generated key: $Le_Next_Domain_Key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4549 cat "$Le_Next_Domain_Key" >"$CERT_KEY_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4550 echo "" >"$Le_Next_Domain_Key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4551 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4552 if ! createDomainKey "$_main_domain" "$_key_length"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4553 _err "Error creating domain key." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4554 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4555 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4556 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4557 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4558 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4559 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4560 if [ "$Le_ForceNewDomainKey" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4561 _info "Generating next pre-generate key." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4562 if [ ! -e "$Le_Next_Domain_Key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4563 touch "$Le_Next_Domain_Key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4564 chmod 600 "$Le_Next_Domain_Key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4565 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4566 if ! _createkey "$_key_length" "$Le_Next_Domain_Key"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4567 _err "Cannot pre-generate domain key" |
| 1630 | 4568 return 1 |
| 4569 fi | |
| 4570 fi | |
| 4571 if ! _createcsr "$_main_domain" "$_alt_domains" "$CERT_KEY_PATH" "$CSR_PATH" "$DOMAIN_SSL_CONF"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4572 _err "Error creating CSR." |
| 1630 | 4573 _clearup |
| 4574 _on_issue_err "$_post_hook" | |
| 4575 return 1 | |
| 4576 fi | |
| 4577 fi | |
| 4578 | |
| 4579 _savedomainconf "Le_Keylength" "$_key_length" | |
| 4580 | |
| 4581 vlist="$Le_Vlist" | |
| 4582 _cleardomainconf "Le_Vlist" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4583 _debug "Getting domain auth token for each domain" |
| 1630 | 4584 sep='#' |
| 4585 dvsep=',' | |
| 4586 if [ -z "$vlist" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4587 #make new order request |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4588 _identifiers="{\"type\":\"$(_getIdType "$_main_domain")\",\"value\":\"$(_idn "$_main_domain")\"}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4589 _w_index=1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4590 while true; do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4591 d="$(echo "$_alt_domains," | cut -d , -f "$_w_index")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4592 _w_index="$(_math "$_w_index" + 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4593 _debug d "$d" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4594 if [ -z "$d" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4595 break |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4596 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4597 _identifiers="$_identifiers,{\"type\":\"$(_getIdType "$d")\",\"value\":\"$(_idn "$d")\"}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4598 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4599 _debug2 _identifiers "$_identifiers" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4600 _notBefore="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4601 _notAfter="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4602 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4603 if [ "$_valid_from" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4604 _savedomainconf "Le_Valid_From" "$_valid_from" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4605 _debug2 "_valid_from" "$_valid_from" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4606 _notBefore="$(_convertValidaty "" "$_valid_from")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4607 if [ "$?" != "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4608 _err "Cannot parse _valid_from: $_valid_from" |
| 1630 | 4609 return 1 |
| 4610 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4611 if [ "$(_time)" -gt "$(_date2time "$_notBefore")" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4612 _notBefore="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4613 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4614 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4615 _cleardomainconf "Le_Valid_From" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4616 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4617 _debug2 _notBefore "$_notBefore" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4618 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4619 if [ "$_valid_to" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4620 _debug2 "_valid_to" "$_valid_to" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4621 _savedomainconf "Le_Valid_To" "$_valid_to" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4622 _notAfter="$(_convertValidaty "$_notBefore" "$_valid_to")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4623 if [ "$?" != "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4624 _err "Cannot parse _valid_to: $_valid_to" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4625 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4626 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4627 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4628 _cleardomainconf "Le_Valid_To" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4629 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4630 _debug2 "_notAfter" "$_notAfter" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4631 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4632 _newOrderObj="{\"identifiers\": [$_identifiers]" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4633 if [ "$_notBefore" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4634 _newOrderObj="$_newOrderObj,\"notBefore\": \"$_notBefore\"" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4635 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4636 if [ "$_notAfter" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4637 _newOrderObj="$_newOrderObj,\"notAfter\": \"$_notAfter\"" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4638 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4639 _debug "STEP 1, Ordering a Certificate" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4640 if ! _send_signed_request "$ACME_NEW_ORDER" "$_newOrderObj}"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4641 _err "Error creating new order." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4642 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4643 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4644 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4645 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4646 if _contains "$response" "invalid"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4647 if echo "$response" | _normalizeJson | grep '"status":"invalid"' >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4648 _err "Create new order with invalid status." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4649 _err "$response" |
| 1630 | 4650 _clearup |
| 4651 _on_issue_err "$_post_hook" | |
| 4652 return 1 | |
| 4653 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4654 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4655 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4656 Le_LinkOrder="$(echo "$responseHeaders" | grep -i '^Location.*$' | _tail_n 1 | tr -d "\r\n " | cut -d ":" -f 2-)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4657 _debug Le_LinkOrder "$Le_LinkOrder" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4658 Le_OrderFinalize="$(echo "$response" | _egrep_o '"finalize" *: *"[^"]*"' | cut -d '"' -f 4)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4659 _debug Le_OrderFinalize "$Le_OrderFinalize" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4660 if [ -z "$Le_OrderFinalize" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4661 _err "Error creating new order. Le_OrderFinalize not found. $response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4662 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4663 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4664 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4665 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4666 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4667 #for dns manual mode |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4668 _savedomainconf "Le_OrderFinalize" "$Le_OrderFinalize" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4669 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4670 _authorizations_seg="$(echo "$response" | _json_decode | _egrep_o '"authorizations" *: *\[[^\[]*\]' | cut -d '[' -f 2 | tr -d ']' | tr -d '"')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4671 _debug2 _authorizations_seg "$_authorizations_seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4672 if [ -z "$_authorizations_seg" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4673 _err "_authorizations_seg not found." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4674 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4675 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4676 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4677 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4678 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4679 _debug "STEP 2, Get the authorizations of each domain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4680 #domain and authz map |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4681 _authorizations_map="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4682 for _authz_url in $(echo "$_authorizations_seg" | tr ',' ' '); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4683 _debug2 "_authz_url" "$_authz_url" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4684 if ! _send_signed_request "$_authz_url"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4685 _err "Error getting authz." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4686 _err "_authorizations_seg" "$_authorizations_seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4687 _err "_authz_url" "$_authz_url" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4688 _err "$response" |
| 1630 | 4689 _clearup |
| 4690 _on_issue_err "$_post_hook" | |
| 4691 return 1 | |
| 4692 fi | |
| 4693 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4694 response="$(echo "$response" | _normalizeJson)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4695 _debug2 response "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4696 if echo "$response" | grep '"status":"invalid"' >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4697 _err "get authz objec with invalid status, please try again later." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4698 _err "_authorizations_seg" "$_authorizations_seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4699 _err "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4700 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4701 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4702 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4703 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4704 _d="$(echo "$response" | _egrep_o '"value" *: *"[^"]*"' | cut -d : -f 2- | tr -d ' "')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4705 if _contains "$response" "\"wildcard\" *: *true"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4706 _d="*.$_d" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4707 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4708 _debug2 _d "$_d" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4709 _authorizations_map="$_d,$response#$_authz_url |
| 1630 | 4710 $_authorizations_map" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4711 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4712 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4713 _debug2 _authorizations_map "$_authorizations_map" |
| 1630 | 4714 |
| 4715 _index=0 | |
| 4716 _currentRoot="" | |
| 4717 _w_index=1 | |
| 4718 while true; do | |
| 4719 d="$(echo "$_main_domain,$_alt_domains," | cut -d , -f "$_w_index")" | |
| 4720 _w_index="$(_math "$_w_index" + 1)" | |
| 4721 _debug d "$d" | |
| 4722 if [ -z "$d" ]; then | |
| 4723 break | |
| 4724 fi | |
| 4725 _info "Getting webroot for domain" "$d" | |
| 4726 _index=$(_math $_index + 1) | |
| 4727 _w="$(echo $_web_roots | cut -d , -f $_index)" | |
| 4728 _debug _w "$_w" | |
| 4729 if [ "$_w" ]; then | |
| 4730 _currentRoot="$_w" | |
| 4731 fi | |
| 4732 _debug "_currentRoot" "$_currentRoot" | |
| 4733 | |
| 4734 vtype="$VTYPE_HTTP" | |
| 4735 #todo, v2 wildcard force to use dns | |
| 4736 if _startswith "$_currentRoot" "$W_DNS"; then | |
| 4737 vtype="$VTYPE_DNS" | |
| 4738 fi | |
| 4739 | |
| 4740 if [ "$_currentRoot" = "$W_ALPN" ]; then | |
| 4741 vtype="$VTYPE_ALPN" | |
| 4742 fi | |
| 4743 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4744 _idn_d="$(_idn "$d")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4745 _candidates="$(echo "$_authorizations_map" | grep -i "^$_idn_d,")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4746 _debug2 _candidates "$_candidates" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4747 if [ "$(echo "$_candidates" | wc -l)" -gt 1 ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4748 for _can in $_candidates; do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4749 if _startswith "$(echo "$_can" | tr '.' '|')" "$(echo "$_idn_d" | tr '.' '|'),"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4750 _candidates="$_can" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4751 break |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4752 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4753 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4754 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4755 response="$(echo "$_candidates" | sed "s/$_idn_d,//")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4756 _debug2 "response" "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4757 if [ -z "$response" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4758 _err "Error getting authz." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4759 _err "_authorizations_map" "$_authorizations_map" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4760 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4761 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4762 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4763 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4764 _authz_url="$(echo "$_candidates" | sed "s/$_idn_d,//" | _egrep_o "#.*" | sed "s/^#//")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4765 _debug _authz_url "$_authz_url" |
| 1630 | 4766 if [ -z "$thumbprint" ]; then |
| 4767 thumbprint="$(__calc_account_thumbprint)" | |
| 4768 fi | |
| 4769 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4770 keyauthorization="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4771 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4772 if echo "$response" | grep '"status":"valid"' >/dev/null 2>&1; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4773 _debug "$d is already valid." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4774 keyauthorization="$STATE_VERIFIED" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4775 _debug keyauthorization "$keyauthorization" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4776 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4777 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4778 # Fix for empty error objects in response which mess up the original code, adapted from fix suggested here: https://github.com/acmesh-official/acme.sh/issues/4933#issuecomment-1870499018 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4779 entry="$(echo "$response" | sed s/'"error":{}'/'"error":null'/ | _egrep_o '[^\{]*"type":"'$vtype'"[^\}]*')" |
| 1630 | 4780 _debug entry "$entry" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4781 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4782 if [ -z "$keyauthorization" -a -z "$entry" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4783 _err "Cannot get domain token entry $d for $vtype" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4784 _supported_vtypes="$(echo "$response" | _egrep_o "\"challenges\":\[[^]]*]" | tr '{' "\n" | grep type | cut -d '"' -f 4 | tr "\n" ' ')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4785 if [ "$_supported_vtypes" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4786 _err "Supported validation types are: $_supported_vtypes, but you specified: $vtype" |
| 1630 | 4787 fi |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4788 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4789 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4790 return 1 |
| 1630 | 4791 fi |
| 4792 | |
| 4793 if [ -z "$keyauthorization" ]; then | |
| 4794 token="$(echo "$entry" | _egrep_o '"token":"[^"]*' | cut -d : -f 2 | tr -d '"')" | |
| 4795 _debug token "$token" | |
| 4796 | |
| 4797 if [ -z "$token" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4798 _err "Cannot get domain token $entry" |
| 1630 | 4799 _clearup |
| 4800 _on_issue_err "$_post_hook" | |
| 4801 return 1 | |
| 4802 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4803 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4804 uri="$(echo "$entry" | _egrep_o '"url":"[^"]*' | cut -d '"' -f 4 | _head_n 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4805 |
| 1630 | 4806 _debug uri "$uri" |
| 4807 | |
| 4808 if [ -z "$uri" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4809 _err "Cannot get domain URI $entry" |
| 1630 | 4810 _clearup |
| 4811 _on_issue_err "$_post_hook" | |
| 4812 return 1 | |
| 4813 fi | |
| 4814 keyauthorization="$token.$thumbprint" | |
| 4815 _debug keyauthorization "$keyauthorization" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4816 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4817 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4818 dvlist="$d$sep$keyauthorization$sep$uri$sep$vtype$sep$_currentRoot$sep$_authz_url" |
| 1630 | 4819 _debug dvlist "$dvlist" |
| 4820 | |
| 4821 vlist="$vlist$dvlist$dvsep" | |
| 4822 | |
| 4823 done | |
| 4824 _debug vlist "$vlist" | |
| 4825 #add entry | |
| 4826 dns_entries="" | |
| 4827 dnsadded="" | |
| 4828 ventries=$(echo "$vlist" | tr "$dvsep" ' ') | |
| 4829 _alias_index=1 | |
| 4830 for ventry in $ventries; do | |
| 4831 d=$(echo "$ventry" | cut -d "$sep" -f 1) | |
| 4832 keyauthorization=$(echo "$ventry" | cut -d "$sep" -f 2) | |
| 4833 vtype=$(echo "$ventry" | cut -d "$sep" -f 4) | |
| 4834 _currentRoot=$(echo "$ventry" | cut -d "$sep" -f 5) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4835 _authz_url=$(echo "$ventry" | cut -d "$sep" -f 6) |
| 1630 | 4836 _debug d "$d" |
| 4837 if [ "$keyauthorization" = "$STATE_VERIFIED" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4838 _debug "$d has already been verified, skipping $vtype." |
| 1630 | 4839 _alias_index="$(_math "$_alias_index" + 1)" |
| 4840 continue | |
| 4841 fi | |
| 4842 | |
| 4843 if [ "$vtype" = "$VTYPE_DNS" ]; then | |
| 4844 dnsadded='0' | |
| 4845 _dns_root_d="$d" | |
| 4846 if _startswith "$_dns_root_d" "*."; then | |
| 4847 _dns_root_d="$(echo "$_dns_root_d" | sed 's/*.//')" | |
| 4848 fi | |
| 4849 _d_alias="$(_getfield "$_challenge_alias" "$_alias_index")" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4850 test "$_d_alias" = "$NO_VALUE" && _d_alias="" |
| 1630 | 4851 _alias_index="$(_math "$_alias_index" + 1)" |
| 4852 _debug "_d_alias" "$_d_alias" | |
| 4853 if [ "$_d_alias" ]; then | |
| 4854 if _startswith "$_d_alias" "$DNS_ALIAS_PREFIX"; then | |
| 4855 txtdomain="$(echo "$_d_alias" | sed "s/$DNS_ALIAS_PREFIX//")" | |
| 4856 else | |
| 4857 txtdomain="_acme-challenge.$_d_alias" | |
| 4858 fi | |
| 4859 dns_entry="${_dns_root_d}${dvsep}_acme-challenge.$_dns_root_d$dvsep$txtdomain$dvsep$_currentRoot" | |
| 4860 else | |
| 4861 txtdomain="_acme-challenge.$_dns_root_d" | |
| 4862 dns_entry="${_dns_root_d}${dvsep}_acme-challenge.$_dns_root_d$dvsep$dvsep$_currentRoot" | |
| 4863 fi | |
| 4864 | |
| 4865 _debug txtdomain "$txtdomain" | |
| 4866 txt="$(printf "%s" "$keyauthorization" | _digest "sha256" | _url_replace)" | |
| 4867 _debug txt "$txt" | |
| 4868 | |
| 4869 d_api="$(_findHook "$_dns_root_d" $_SUB_FOLDER_DNSAPI "$_currentRoot")" | |
| 4870 _debug d_api "$d_api" | |
| 4871 | |
| 4872 dns_entry="$dns_entry$dvsep$txt${dvsep}$d_api" | |
| 4873 _debug2 dns_entry "$dns_entry" | |
| 4874 if [ "$d_api" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4875 _debug "Found domain API file: $d_api" |
| 1630 | 4876 else |
| 4877 if [ "$_currentRoot" != "$W_DNS" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4878 _err "Cannot find DNS API hook for: $_currentRoot" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4879 _info "You need to add the TXT record manually." |
| 1630 | 4880 fi |
| 4881 _info "$(__red "Add the following TXT record:")" | |
| 4882 _info "$(__red "Domain: '$(__green "$txtdomain")'")" | |
| 4883 _info "$(__red "TXT value: '$(__green "$txt")'")" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4884 _info "$(__red "Please make sure to prepend '_acme-challenge.' to your domain")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4885 _info "$(__red "so that the resulting subdomain is: $txtdomain")" |
| 1630 | 4886 continue |
| 4887 fi | |
| 4888 | |
| 4889 ( | |
| 4890 if ! . "$d_api"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4891 _err "Error loading file $d_api. Please check your API file and try again." |
| 1630 | 4892 return 1 |
| 4893 fi | |
| 4894 | |
| 4895 addcommand="${_currentRoot}_add" | |
| 4896 if ! _exists "$addcommand"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4897 _err "It seems that your API file is incorrect. Make sure it has a function named: $addcommand" |
| 1630 | 4898 return 1 |
| 4899 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4900 _info "Adding TXT value: $txt for domain: $txtdomain" |
| 1630 | 4901 if ! $addcommand "$txtdomain" "$txt"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4902 _err "Error adding TXT record to domain: $txtdomain" |
| 1630 | 4903 return 1 |
| 4904 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4905 _info "The TXT record has been successfully added." |
| 1630 | 4906 ) |
| 4907 | |
| 4908 if [ "$?" != "0" ]; then | |
| 4909 _on_issue_err "$_post_hook" "$vlist" | |
| 4910 _clearup | |
| 4911 return 1 | |
| 4912 fi | |
| 4913 dns_entries="$dns_entries$dns_entry | |
| 4914 " | |
| 4915 _debug2 "$dns_entries" | |
| 4916 dnsadded='1' | |
| 4917 fi | |
| 4918 done | |
| 4919 | |
| 4920 if [ "$dnsadded" = '0' ]; then | |
| 4921 _savedomainconf "Le_Vlist" "$vlist" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4922 _debug "DNS record not yet added. Will save to $DOMAIN_CONF and exit." |
| 1630 | 4923 _err "Please add the TXT records to the domains, and re-run with --renew." |
| 4924 _on_issue_err "$_post_hook" | |
| 4925 _clearup | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4926 # If asked to be in manual DNS mode, flag this exit with a separate |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4927 # error so it can be distinguished from other failures. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4928 return $CODE_DNS_MANUAL |
| 1630 | 4929 fi |
| 4930 | |
| 4931 fi | |
| 4932 | |
| 4933 if [ "$dns_entries" ]; then | |
| 4934 if [ -z "$Le_DNSSleep" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4935 _info "Let's check each DNS record now. Sleeping for 20 seconds first." |
| 1630 | 4936 _sleep 20 |
| 4937 if ! _check_dns_entries; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4938 _err "Error checking DNS." |
| 1630 | 4939 _on_issue_err "$_post_hook" |
| 4940 _clearup | |
| 4941 return 1 | |
| 4942 fi | |
| 4943 else | |
| 4944 _savedomainconf "Le_DNSSleep" "$Le_DNSSleep" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4945 _info "Sleeping for $(__green $Le_DNSSleep) seconds to wait for the the TXT records to take effect" |
| 1630 | 4946 _sleep "$Le_DNSSleep" |
| 4947 fi | |
| 4948 fi | |
| 4949 | |
| 4950 NGINX_RESTORE_VLIST="" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4951 _debug "OK, let's start verification" |
| 1630 | 4952 |
| 4953 _ncIndex=1 | |
| 4954 ventries=$(echo "$vlist" | tr "$dvsep" ' ') | |
| 4955 for ventry in $ventries; do | |
| 4956 d=$(echo "$ventry" | cut -d "$sep" -f 1) | |
| 4957 keyauthorization=$(echo "$ventry" | cut -d "$sep" -f 2) | |
| 4958 uri=$(echo "$ventry" | cut -d "$sep" -f 3) | |
| 4959 vtype=$(echo "$ventry" | cut -d "$sep" -f 4) | |
| 4960 _currentRoot=$(echo "$ventry" | cut -d "$sep" -f 5) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4961 _authz_url=$(echo "$ventry" | cut -d "$sep" -f 6) |
| 1630 | 4962 if [ "$keyauthorization" = "$STATE_VERIFIED" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4963 _info "$d is already verified, skipping $vtype." |
| 1630 | 4964 continue |
| 4965 fi | |
| 4966 | |
| 4967 _info "Verifying: $d" | |
| 4968 _debug "d" "$d" | |
| 4969 _debug "keyauthorization" "$keyauthorization" | |
| 4970 _debug "uri" "$uri" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4971 _debug "_authz_url" "$_authz_url" |
| 1630 | 4972 removelevel="" |
| 4973 token="$(printf "%s" "$keyauthorization" | cut -d '.' -f 1)" | |
| 4974 | |
| 4975 _debug "_currentRoot" "$_currentRoot" | |
| 4976 | |
| 4977 if [ "$vtype" = "$VTYPE_HTTP" ]; then | |
| 4978 if [ "$_currentRoot" = "$NO_VALUE" ]; then | |
| 4979 _info "Standalone mode server" | |
| 4980 _ncaddr="$(_getfield "$_local_addr" "$_ncIndex")" | |
| 4981 _ncIndex="$(_math $_ncIndex + 1)" | |
| 4982 _startserver "$keyauthorization" "$_ncaddr" | |
| 4983 if [ "$?" != "0" ]; then | |
| 4984 _clearup | |
| 4985 _on_issue_err "$_post_hook" "$vlist" | |
| 4986 return 1 | |
| 4987 fi | |
| 4988 sleep 1 | |
| 4989 _debug serverproc "$serverproc" | |
| 4990 elif [ "$_currentRoot" = "$MODE_STATELESS" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4991 _info "Stateless mode for domain: $d" |
| 1630 | 4992 _sleep 1 |
| 4993 elif _startswith "$_currentRoot" "$NGINX"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
4994 _info "Nginx mode for domain: $d" |
| 1630 | 4995 #set up nginx server |
| 4996 FOUND_REAL_NGINX_CONF="" | |
| 4997 BACKUP_NGINX_CONF="" | |
| 4998 if ! _setNginx "$d" "$_currentRoot" "$thumbprint"; then | |
| 4999 _clearup | |
| 5000 _on_issue_err "$_post_hook" "$vlist" | |
| 5001 return 1 | |
| 5002 fi | |
| 5003 | |
| 5004 if [ "$FOUND_REAL_NGINX_CONF" ]; then | |
| 5005 _realConf="$FOUND_REAL_NGINX_CONF" | |
| 5006 _backup="$BACKUP_NGINX_CONF" | |
| 5007 _debug _realConf "$_realConf" | |
| 5008 NGINX_RESTORE_VLIST="$d$sep$_realConf$sep$_backup$dvsep$NGINX_RESTORE_VLIST" | |
| 5009 fi | |
| 5010 _sleep 1 | |
| 5011 else | |
| 5012 if [ "$_currentRoot" = "apache" ]; then | |
| 5013 wellknown_path="$ACME_DIR" | |
| 5014 else | |
| 5015 wellknown_path="$_currentRoot/.well-known/acme-challenge" | |
| 5016 if [ ! -d "$_currentRoot/.well-known" ]; then | |
| 5017 removelevel='1' | |
| 5018 elif [ ! -d "$_currentRoot/.well-known/acme-challenge" ]; then | |
| 5019 removelevel='2' | |
| 5020 else | |
| 5021 removelevel='3' | |
| 5022 fi | |
| 5023 fi | |
| 5024 | |
| 5025 _debug wellknown_path "$wellknown_path" | |
| 5026 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5027 _debug "Writing token: $token to $wellknown_path/$token" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5028 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5029 # Ensure .well-known is visible to web server user/group |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5030 # https://github.com/Neilpang/acme.sh/pull/32 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5031 if ! (umask ugo+rx && |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5032 mkdir -p "$wellknown_path" && |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5033 printf "%s" "$keyauthorization" >"$wellknown_path/$token"); then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5034 _err "$d: Cannot write token to file: $wellknown_path/$token" |
| 1630 | 5035 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
| 5036 _clearup | |
| 5037 _on_issue_err "$_post_hook" "$vlist" | |
| 5038 return 1 | |
| 5039 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5040 if ! chmod a+r "$wellknown_path/$token"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5041 _debug "chmod failed, will just continue." |
| 1630 | 5042 fi |
| 5043 fi | |
| 5044 elif [ "$vtype" = "$VTYPE_ALPN" ]; then | |
| 5045 acmevalidationv1="$(printf "%s" "$keyauthorization" | _digest "sha256" "hex")" | |
| 5046 _debug acmevalidationv1 "$acmevalidationv1" | |
| 5047 if ! _starttlsserver "$d" "" "$Le_TLSPort" "$keyauthorization" "$_ncaddr" "$acmevalidationv1"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5048 _err "Error starting TLS server." |
| 1630 | 5049 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
| 5050 _clearup | |
| 5051 _on_issue_err "$_post_hook" "$vlist" | |
| 5052 return 1 | |
| 5053 fi | |
| 5054 fi | |
| 5055 | |
| 5056 if ! __trigger_validation "$uri" "$keyauthorization" "$vtype"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5057 _err "$d: Cannot get challenge: $response" |
| 1630 | 5058 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
| 5059 _clearup | |
| 5060 _on_issue_err "$_post_hook" "$vlist" | |
| 5061 return 1 | |
| 5062 fi | |
| 5063 | |
| 5064 if [ "$code" ] && [ "$code" != '202' ]; then | |
| 5065 if [ "$code" = '200' ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5066 _debug "Trigger validation code: $code" |
| 1630 | 5067 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5068 _err "$d: Challenge error: $response" |
| 1630 | 5069 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
| 5070 _clearup | |
| 5071 _on_issue_err "$_post_hook" "$vlist" | |
| 5072 return 1 | |
| 5073 fi | |
| 5074 fi | |
| 5075 | |
| 5076 waittimes=0 | |
| 5077 if [ -z "$MAX_RETRY_TIMES" ]; then | |
| 5078 MAX_RETRY_TIMES=30 | |
| 5079 fi | |
| 5080 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5081 _debug "Let's check the authz status" |
| 1630 | 5082 while true; do |
| 5083 waittimes=$(_math "$waittimes" + 1) | |
| 5084 if [ "$waittimes" -ge "$MAX_RETRY_TIMES" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5085 _err "$d: Timeout" |
| 1630 | 5086 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
| 5087 _clearup | |
| 5088 _on_issue_err "$_post_hook" "$vlist" | |
| 5089 return 1 | |
| 5090 fi | |
| 5091 | |
| 5092 _debug2 original "$response" | |
| 5093 | |
| 5094 response="$(echo "$response" | _normalizeJson)" | |
| 5095 _debug2 response "$response" | |
| 5096 | |
| 5097 status=$(echo "$response" | _egrep_o '"status":"[^"]*' | cut -d : -f 2 | tr -d '"') | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5098 _debug2 status "$status" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5099 if _contains "$status" "invalid"; then |
| 1630 | 5100 error="$(echo "$response" | _egrep_o '"error":\{[^\}]*')" |
| 5101 _debug2 error "$error" | |
| 5102 errordetail="$(echo "$error" | _egrep_o '"detail": *"[^"]*' | cut -d '"' -f 4)" | |
| 5103 _debug2 errordetail "$errordetail" | |
| 5104 if [ "$errordetail" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5105 _err "$d: Invalid status. Verification error details: $errordetail" |
| 1630 | 5106 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5107 _err "$d: Invalid status, Verification error: $error" |
| 1630 | 5108 fi |
| 5109 if [ "$DEBUG" ]; then | |
| 5110 if [ "$vtype" = "$VTYPE_HTTP" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5111 _debug "Debug: GET token URL." |
| 1630 | 5112 _get "http://$d/.well-known/acme-challenge/$token" "" 1 |
| 5113 fi | |
| 5114 fi | |
| 5115 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" | |
| 5116 _clearup | |
| 5117 _on_issue_err "$_post_hook" "$vlist" | |
| 5118 return 1 | |
| 5119 fi | |
| 5120 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5121 if _contains "$status" "valid"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5122 _info "$(__green Success)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5123 _stopserver "$serverproc" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5124 serverproc="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5125 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5126 break |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5127 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5128 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5129 if _contains "$status" "pending"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5130 _info "Pending. The CA is processing your order, please wait. ($waittimes/$MAX_RETRY_TIMES)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5131 elif _contains "$status" "processing"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5132 _info "Processing. The CA is processing your order, please wait. ($waittimes/$MAX_RETRY_TIMES)" |
| 1630 | 5133 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5134 _err "$d: Unknown status: $status. Verification error: $response" |
| 1630 | 5135 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
| 5136 _clearup | |
| 5137 _on_issue_err "$_post_hook" "$vlist" | |
| 5138 return 1 | |
| 5139 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5140 _debug "Sleep 2 seconds before verifying again" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5141 _sleep 2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5142 _debug "Checking" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5143 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5144 _send_signed_request "$_authz_url" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5145 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5146 if [ "$?" != "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5147 _err "$d: Invalid code. Verification error: $response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5148 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5149 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5150 _on_issue_err "$_post_hook" "$vlist" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5151 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5152 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5153 _retryafter=$(echo "$responseHeaders" | grep -i "^Retry-After *: *[0-9]\+ *" | cut -d : -f 2 | tr -d ' ' | tr -d '\r') |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5154 _sleep_overload_retry_sec=$_retryafter |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5155 if [ "$_sleep_overload_retry_sec" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5156 if [ $_sleep_overload_retry_sec -le 600 ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5157 _sleep $_sleep_overload_retry_sec |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5158 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5159 _info "The retryafter=$_retryafter value is too large (> 600), will not retry anymore." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5160 _clearupwebbroot "$_currentRoot" "$removelevel" "$token" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5161 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5162 _on_issue_err "$_post_hook" "$vlist" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5163 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5164 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5165 fi |
| 1630 | 5166 done |
| 5167 | |
| 5168 done | |
| 5169 | |
| 5170 _clearup | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5171 _info "Verification finished, beginning signing." |
| 1630 | 5172 der="$(_getfile "${CSR_PATH}" "${BEGIN_CSR}" "${END_CSR}" | tr -d "\r\n" | _url_replace)" |
| 5173 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5174 _info "Let's finalize the order." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5175 _info "Le_OrderFinalize" "$Le_OrderFinalize" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5176 if ! _send_signed_request "${Le_OrderFinalize}" "{\"csr\": \"$der\"}"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5177 _err "Signing failed." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5178 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5179 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5180 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5181 if [ "$code" != "200" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5182 _err "Signing failed. Finalize code was not 200." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5183 _err "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5184 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5185 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5186 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5187 if [ -z "$Le_LinkOrder" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5188 Le_LinkOrder="$(echo "$responseHeaders" | grep -i '^Location.*$' | _tail_n 1 | tr -d "\r\n \t" | cut -d ":" -f 2-)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5189 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5190 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5191 _savedomainconf "Le_LinkOrder" "$Le_LinkOrder" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5192 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5193 _link_cert_retry=0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5194 _MAX_CERT_RETRY=30 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5195 while [ "$_link_cert_retry" -lt "$_MAX_CERT_RETRY" ]; do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5196 if _contains "$response" "\"status\":\"valid\""; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5197 _debug "Order status is valid." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5198 Le_LinkCert="$(echo "$response" | _egrep_o '"certificate" *: *"[^"]*"' | cut -d '"' -f 4)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5199 _debug Le_LinkCert "$Le_LinkCert" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5200 if [ -z "$Le_LinkCert" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5201 _err "A signing error occurred: could not find Le_LinkCert" |
| 1630 | 5202 _err "$response" |
| 5203 _on_issue_err "$_post_hook" | |
| 5204 return 1 | |
| 5205 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5206 break |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5207 elif _contains "$response" "\"processing\""; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5208 _info "Order status is 'processing', let's sleep and retry." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5209 _retryafter=$(echo "$responseHeaders" | grep -i "^Retry-After *:" | cut -d : -f 2 | tr -d ' ' | tr -d '\r') |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5210 _debug "_retryafter" "$_retryafter" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5211 if [ "$_retryafter" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5212 _info "Sleeping for $_retryafter seconds then retrying" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5213 _sleep $_retryafter |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5214 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5215 _sleep 2 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5216 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5217 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5218 _err "Signing error: wrong status" |
| 1630 | 5219 _err "$response" |
| 5220 _on_issue_err "$_post_hook" | |
| 5221 return 1 | |
| 5222 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5223 #the order is processing, so we are going to poll order status |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5224 if [ -z "$Le_LinkOrder" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5225 _err "Signing error: could not get order link location header" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5226 _err "responseHeaders" "$responseHeaders" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5227 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5228 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5229 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5230 _info "Polling order status: $Le_LinkOrder" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5231 if ! _send_signed_request "$Le_LinkOrder"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5232 _err "Signing failed. Could not make POST request to Le_LinkOrder for cert: $Le_LinkOrder." |
| 1630 | 5233 _err "$response" |
| 5234 _on_issue_err "$_post_hook" | |
| 5235 return 1 | |
| 5236 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5237 _link_cert_retry="$(_math $_link_cert_retry + 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5238 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5239 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5240 if [ -z "$Le_LinkCert" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5241 _err "Signing failed. Could not get Le_LinkCert, and stopped retrying after reaching the retry limit." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5242 _err "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5243 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5244 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5245 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5246 _info "Downloading cert." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5247 _info "Le_LinkCert" "$Le_LinkCert" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5248 if ! _send_signed_request "$Le_LinkCert"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5249 _err "Signing failed. Could not download cert: $Le_LinkCert." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5250 _err "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5251 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5252 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5253 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5254 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5255 echo "$response" >"$CERT_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5256 _split_cert_chain "$CERT_PATH" "$CERT_FULLCHAIN_PATH" "$CA_CERT_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5257 if [ -z "$_preferred_chain" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5258 _preferred_chain=$(_readcaconf DEFAULT_PREFERRED_CHAIN) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5259 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5260 if [ "$_preferred_chain" ] && [ -f "$CERT_FULLCHAIN_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5261 if [ "$DEBUG" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5262 _debug "Default chain issuers: " "$(_get_chain_issuers "$CERT_FULLCHAIN_PATH")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5263 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5264 if ! _match_issuer "$CERT_FULLCHAIN_PATH" "$_preferred_chain"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5265 rels="$(echo "$responseHeaders" | tr -d ' <>' | grep -i "^link:" | grep -i 'rel="alternate"' | cut -d : -f 2- | cut -d ';' -f 1)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5266 _debug2 "rels" "$rels" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5267 for rel in $rels; do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5268 _info "Trying rel: $rel" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5269 if ! _send_signed_request "$rel"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5270 _err "Signing failed, could not download cert: $rel" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5271 _err "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5272 continue |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5273 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5274 _relcert="$CERT_PATH.alt" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5275 _relfullchain="$CERT_FULLCHAIN_PATH.alt" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5276 _relca="$CA_CERT_PATH.alt" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5277 echo "$response" >"$_relcert" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5278 _split_cert_chain "$_relcert" "$_relfullchain" "$_relca" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5279 if [ "$DEBUG" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5280 _debug "rel chain issuers: " "$(_get_chain_issuers "$_relfullchain")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5281 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5282 if _match_issuer "$_relfullchain" "$_preferred_chain"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5283 _info "Matched issuer in: $rel" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5284 cat $_relcert >"$CERT_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5285 cat $_relfullchain >"$CERT_FULLCHAIN_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5286 cat $_relca >"$CA_CERT_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5287 rm -f "$_relcert" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5288 rm -f "$_relfullchain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5289 rm -f "$_relca" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5290 break |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5291 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5292 rm -f "$_relcert" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5293 rm -f "$_relfullchain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5294 rm -f "$_relca" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5295 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5296 fi |
| 1630 | 5297 fi |
| 5298 | |
| 5299 _debug "Le_LinkCert" "$Le_LinkCert" | |
| 5300 _savedomainconf "Le_LinkCert" "$Le_LinkCert" | |
| 5301 | |
| 5302 if [ -z "$Le_LinkCert" ] || ! _checkcert "$CERT_PATH"; then | |
| 5303 response="$(echo "$response" | _dbase64 "multiline" | tr -d '\0' | _normalizeJson)" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5304 _err "Signing failed: $(echo "$response" | _egrep_o '"detail":"[^"]*"')" |
| 1630 | 5305 _on_issue_err "$_post_hook" |
| 5306 return 1 | |
| 5307 fi | |
| 5308 | |
| 5309 if [ "$Le_LinkCert" ]; then | |
| 5310 _info "$(__green "Cert success.")" | |
| 5311 cat "$CERT_PATH" | |
| 5312 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5313 _info "Your cert is in: $(__green "$CERT_PATH")" |
| 1630 | 5314 |
| 5315 if [ -f "$CERT_KEY_PATH" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5316 _info "Your cert key is in: $(__green "$CERT_KEY_PATH")" |
| 1630 | 5317 fi |
| 5318 | |
| 5319 if [ ! "$USER_PATH" ] || [ ! "$_ACME_IN_CRON" ]; then | |
| 5320 USER_PATH="$PATH" | |
| 5321 _saveaccountconf "USER_PATH" "$USER_PATH" | |
| 5322 fi | |
| 5323 fi | |
| 5324 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5325 [ -f "$CA_CERT_PATH" ] && _info "The intermediate CA cert is in: $(__green "$CA_CERT_PATH")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5326 [ -f "$CERT_FULLCHAIN_PATH" ] && _info "And the full-chain cert is in: $(__green "$CERT_FULLCHAIN_PATH")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5327 if [ "$Le_ForceNewDomainKey" ] && [ -e "$Le_Next_Domain_Key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5328 _info "Your pre-generated key for future cert key changes is in: $(__green "$Le_Next_Domain_Key")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5329 fi |
| 1630 | 5330 |
| 5331 Le_CertCreateTime=$(_time) | |
| 5332 _savedomainconf "Le_CertCreateTime" "$Le_CertCreateTime" | |
| 5333 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5334 Le_CertCreateTimeStr=$(_time2str "$Le_CertCreateTime") |
| 1630 | 5335 _savedomainconf "Le_CertCreateTimeStr" "$Le_CertCreateTimeStr" |
| 5336 | |
| 5337 if [ -z "$Le_RenewalDays" ] || [ "$Le_RenewalDays" -lt "0" ]; then | |
| 5338 Le_RenewalDays="$DEFAULT_RENEW" | |
| 5339 else | |
| 5340 _savedomainconf "Le_RenewalDays" "$Le_RenewalDays" | |
| 5341 fi | |
| 5342 | |
| 5343 if [ "$CA_BUNDLE" ]; then | |
| 5344 _saveaccountconf CA_BUNDLE "$CA_BUNDLE" | |
| 5345 else | |
| 5346 _clearaccountconf "CA_BUNDLE" | |
| 5347 fi | |
| 5348 | |
| 5349 if [ "$CA_PATH" ]; then | |
| 5350 _saveaccountconf CA_PATH "$CA_PATH" | |
| 5351 else | |
| 5352 _clearaccountconf "CA_PATH" | |
| 5353 fi | |
| 5354 | |
| 5355 if [ "$HTTPS_INSECURE" ]; then | |
| 5356 _saveaccountconf HTTPS_INSECURE "$HTTPS_INSECURE" | |
| 5357 else | |
| 5358 _clearaccountconf "HTTPS_INSECURE" | |
| 5359 fi | |
| 5360 | |
| 5361 if [ "$Le_Listen_V4" ]; then | |
| 5362 _savedomainconf "Le_Listen_V4" "$Le_Listen_V4" | |
| 5363 _cleardomainconf Le_Listen_V6 | |
| 5364 elif [ "$Le_Listen_V6" ]; then | |
| 5365 _savedomainconf "Le_Listen_V6" "$Le_Listen_V6" | |
| 5366 _cleardomainconf Le_Listen_V4 | |
| 5367 fi | |
| 5368 | |
| 5369 if [ "$Le_ForceNewDomainKey" = "1" ]; then | |
| 5370 _savedomainconf "Le_ForceNewDomainKey" "$Le_ForceNewDomainKey" | |
| 5371 else | |
| 5372 _cleardomainconf Le_ForceNewDomainKey | |
| 5373 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5374 if [ "$_notAfter" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5375 Le_NextRenewTime=$(_date2time "$_notAfter") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5376 Le_NextRenewTimeStr="$_notAfter" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5377 if [ "$_valid_to" ] && ! _startswith "$_valid_to" "+"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5378 _info "The domain is set to be valid until: $_valid_to" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5379 _info "It cannot be renewed automatically" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5380 _info "See: $_VALIDITY_WIKI" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5381 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5382 _now=$(_time) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5383 _debug2 "_now" "$_now" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5384 _lifetime=$(_math $Le_NextRenewTime - $_now) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5385 _debug2 "_lifetime" "$_lifetime" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5386 if [ $_lifetime -gt 86400 ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5387 #if lifetime is logner than one day, it will renew one day before |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5388 Le_NextRenewTime=$(_math $Le_NextRenewTime - 86400) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5389 Le_NextRenewTimeStr=$(_time2str "$Le_NextRenewTime") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5390 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5391 #if lifetime is less than 24 hours, it will renew one hour before |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5392 Le_NextRenewTime=$(_math $Le_NextRenewTime - 3600) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5393 Le_NextRenewTimeStr=$(_time2str "$Le_NextRenewTime") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5394 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5395 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5396 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5397 Le_NextRenewTime=$(_math "$Le_CertCreateTime" + "$Le_RenewalDays" \* 24 \* 60 \* 60) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5398 Le_NextRenewTime=$(_math "$Le_NextRenewTime" - 86400) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5399 Le_NextRenewTimeStr=$(_time2str "$Le_NextRenewTime") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5400 fi |
| 1630 | 5401 _savedomainconf "Le_NextRenewTimeStr" "$Le_NextRenewTimeStr" |
| 5402 _savedomainconf "Le_NextRenewTime" "$Le_NextRenewTime" | |
| 5403 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5404 #convert to pkcs12 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5405 if [ "$Le_PFXPassword" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5406 _toPkcs "$CERT_PFX_PATH" "$CERT_KEY_PATH" "$CERT_PATH" "$CA_CERT_PATH" "$Le_PFXPassword" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5407 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5408 export CERT_PFX_PATH |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5409 |
| 1630 | 5410 if [ "$_real_cert$_real_key$_real_ca$_reload_cmd$_real_fullchain" ]; then |
| 5411 _savedomainconf "Le_RealCertPath" "$_real_cert" | |
| 5412 _savedomainconf "Le_RealCACertPath" "$_real_ca" | |
| 5413 _savedomainconf "Le_RealKeyPath" "$_real_key" | |
| 5414 _savedomainconf "Le_ReloadCmd" "$_reload_cmd" "base64" | |
| 5415 _savedomainconf "Le_RealFullChainPath" "$_real_fullchain" | |
| 5416 if ! _installcert "$_main_domain" "$_real_cert" "$_real_key" "$_real_ca" "$_real_fullchain" "$_reload_cmd"; then | |
| 5417 return 1 | |
| 5418 fi | |
| 5419 fi | |
| 5420 | |
| 5421 if ! _on_issue_success "$_post_hook" "$_renew_hook"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5422 _err "Error calling hook." |
| 1630 | 5423 return 1 |
| 5424 fi | |
| 5425 } | |
| 5426 | |
| 5427 #in_out_cert out_fullchain out_ca | |
| 5428 _split_cert_chain() { | |
| 5429 _certf="$1" | |
| 5430 _fullchainf="$2" | |
| 5431 _caf="$3" | |
| 5432 if [ "$(grep -- "$BEGIN_CERT" "$_certf" | wc -l)" -gt "1" ]; then | |
| 5433 _debug "Found cert chain" | |
| 5434 cat "$_certf" >"$_fullchainf" | |
| 5435 _end_n="$(grep -n -- "$END_CERT" "$_fullchainf" | _head_n 1 | cut -d : -f 1)" | |
| 5436 _debug _end_n "$_end_n" | |
| 5437 sed -n "1,${_end_n}p" "$_fullchainf" >"$_certf" | |
| 5438 _end_n="$(_math $_end_n + 1)" | |
| 5439 sed -n "${_end_n},9999p" "$_fullchainf" >"$_caf" | |
| 5440 fi | |
| 5441 } | |
| 5442 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5443 #domain [isEcc] [server] |
| 1630 | 5444 renew() { |
| 5445 Le_Domain="$1" | |
| 5446 if [ -z "$Le_Domain" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5447 _usage "Usage: $PROJECT_ENTRY --renew --domain <domain.tld> [--ecc] [--server server]" |
| 1630 | 5448 return 1 |
| 5449 fi | |
| 5450 | |
| 5451 _isEcc="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5452 _renewServer="$3" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5453 _debug "_renewServer" "$_renewServer" |
| 1630 | 5454 |
| 5455 _initpath "$Le_Domain" "$_isEcc" | |
| 5456 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5457 _set_level=${NOTIFY_LEVEL:-$NOTIFY_LEVEL_DEFAULT} |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5458 _info "$(__green "Renewing: '$Le_Domain'")" |
| 1630 | 5459 if [ ! -f "$DOMAIN_CONF" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5460 _info "'$Le_Domain' is not an issued domain, skipping." |
| 1630 | 5461 return $RENEW_SKIP |
| 5462 fi | |
| 5463 | |
| 5464 if [ "$Le_RenewalDays" ]; then | |
| 5465 _savedomainconf Le_RenewalDays "$Le_RenewalDays" | |
| 5466 fi | |
| 5467 | |
| 5468 . "$DOMAIN_CONF" | |
| 5469 _debug Le_API "$Le_API" | |
| 5470 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5471 case "$Le_API" in |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5472 "$CA_LETSENCRYPT_V2_TEST") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5473 _info "Switching back to $CA_LETSENCRYPT_V2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5474 Le_API="$CA_LETSENCRYPT_V2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5475 ;; |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5476 "$CA_GOOGLE_TEST") |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5477 _info "Switching back to $CA_GOOGLE" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5478 Le_API="$CA_GOOGLE" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5479 ;; |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5480 esac |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5481 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5482 if [ "$_server" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5483 Le_API="$_server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5484 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5485 _info "Renewing using Le_API=$Le_API" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5486 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5487 _clearAPI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5488 _clearCA |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5489 export ACME_DIRECTORY="$Le_API" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5490 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5491 #reload ca configs |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5492 _debug2 "initpath again." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5493 _initpath "$Le_Domain" "$_isEcc" |
| 1630 | 5494 |
| 5495 if [ -z "$FORCE" ] && [ "$Le_NextRenewTime" ] && [ "$(_time)" -lt "$Le_NextRenewTime" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5496 _info "Skipping. Next renewal time is: $(__green "$Le_NextRenewTimeStr")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5497 _info "Add '$(__red '--force')' to force renewal." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5498 if [ -z "$_ACME_IN_RENEWALL" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5499 if [ $_set_level -ge $NOTIFY_LEVEL_SKIP ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5500 _send_notify "Renew $Le_Domain skipped" "Good, the cert is skipped." "$NOTIFY_HOOK" "$RENEW_SKIP" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5501 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5502 fi |
| 1630 | 5503 return "$RENEW_SKIP" |
| 5504 fi | |
| 5505 | |
| 5506 if [ "$_ACME_IN_CRON" = "1" ] && [ -z "$Le_CertCreateTime" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5507 _info "Skipping invalid cert for: $Le_Domain" |
| 1630 | 5508 return $RENEW_SKIP |
| 5509 fi | |
| 5510 | |
| 5511 _ACME_IS_RENEW="1" | |
| 5512 Le_ReloadCmd="$(_readdomainconf Le_ReloadCmd)" | |
| 5513 Le_PreHook="$(_readdomainconf Le_PreHook)" | |
| 5514 Le_PostHook="$(_readdomainconf Le_PostHook)" | |
| 5515 Le_RenewHook="$(_readdomainconf Le_RenewHook)" | |
| 5516 Le_Preferred_Chain="$(_readdomainconf Le_Preferred_Chain)" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5517 # When renewing from an old version, the empty Le_Keylength means 2048. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5518 # Note, do not use DEFAULT_DOMAIN_KEY_LENGTH as that value may change over |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5519 # time but an empty value implies 2048 specifically. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5520 Le_Keylength="$(_readdomainconf Le_Keylength)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5521 if [ -z "$Le_Keylength" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5522 Le_Keylength=2048 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5523 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5524 if [ "$CA_LETSENCRYPT_V2" = "$Le_API" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5525 #letsencrypt doesn't support ocsp anymore |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5526 if [ "$Le_OCSP_Staple" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5527 export Le_OCSP_Staple="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5528 _cleardomainconf Le_OCSP_Staple |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5529 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5530 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5531 issue "$Le_Webroot" "$Le_Domain" "$Le_Alt" "$Le_Keylength" "$Le_RealCertPath" "$Le_RealKeyPath" "$Le_RealCACertPath" "$Le_ReloadCmd" "$Le_RealFullChainPath" "$Le_PreHook" "$Le_PostHook" "$Le_RenewHook" "$Le_LocalAddress" "$Le_ChallengeAlias" "$Le_Preferred_Chain" "$Le_Valid_From" "$Le_Valid_To" |
| 1630 | 5532 res="$?" |
| 5533 if [ "$res" != "0" ]; then | |
| 5534 return "$res" | |
| 5535 fi | |
| 5536 | |
| 5537 if [ "$Le_DeployHook" ]; then | |
| 5538 _deploy "$Le_Domain" "$Le_DeployHook" | |
| 5539 res="$?" | |
| 5540 fi | |
| 5541 | |
| 5542 _ACME_IS_RENEW="" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5543 if [ -z "$_ACME_IN_RENEWALL" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5544 if [ "$res" = "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5545 if [ $_set_level -ge $NOTIFY_LEVEL_RENEW ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5546 _send_notify "Renew $d success" "Good, the cert is renewed." "$NOTIFY_HOOK" 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5547 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5548 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5549 if [ $_set_level -ge $NOTIFY_LEVEL_ERROR ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5550 _send_notify "Renew $d error" "There is an error." "$NOTIFY_HOOK" 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5551 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5552 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5553 fi |
| 1630 | 5554 |
| 5555 return "$res" | |
| 5556 } | |
| 5557 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5558 #renewAll [stopRenewOnError] [server] |
| 1630 | 5559 renewAll() { |
| 5560 _initpath | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5561 _clearCA |
| 1630 | 5562 _stopRenewOnError="$1" |
| 5563 _debug "_stopRenewOnError" "$_stopRenewOnError" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5564 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5565 _server="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5566 _debug "_server" "$_server" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5567 |
| 1630 | 5568 _ret="0" |
| 5569 _success_msg="" | |
| 5570 _error_msg="" | |
| 5571 _skipped_msg="" | |
| 5572 _error_level=$NOTIFY_LEVEL_SKIP | |
| 5573 _notify_code=$RENEW_SKIP | |
| 5574 _set_level=${NOTIFY_LEVEL:-$NOTIFY_LEVEL_DEFAULT} | |
| 5575 _debug "_set_level" "$_set_level" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5576 export _ACME_IN_RENEWALL=1 |
| 1630 | 5577 for di in "${CERT_HOME}"/*.*/; do |
| 5578 _debug di "$di" | |
| 5579 if ! [ -d "$di" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5580 _debug "Not a directory, skipping: $di" |
| 1630 | 5581 continue |
| 5582 fi | |
| 5583 d=$(basename "$di") | |
| 5584 _debug d "$d" | |
| 5585 ( | |
| 5586 if _endswith "$d" "$ECC_SUFFIX"; then | |
| 5587 _isEcc=$(echo "$d" | cut -d "$ECC_SEP" -f 2) | |
| 5588 d=$(echo "$d" | cut -d "$ECC_SEP" -f 1) | |
| 5589 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5590 renew "$d" "$_isEcc" "$_server" |
| 1630 | 5591 ) |
| 5592 rc="$?" | |
| 5593 _debug "Return code: $rc" | |
| 5594 if [ "$rc" = "0" ]; then | |
| 5595 if [ $_error_level -gt $NOTIFY_LEVEL_RENEW ]; then | |
| 5596 _error_level="$NOTIFY_LEVEL_RENEW" | |
| 5597 _notify_code=0 | |
| 5598 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5599 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5600 if [ $_set_level -ge $NOTIFY_LEVEL_RENEW ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5601 if [ "$NOTIFY_MODE" = "$NOTIFY_MODE_CERT" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5602 _send_notify "Renew $d success" "Good, the cert is renewed." "$NOTIFY_HOOK" 0 |
| 1630 | 5603 fi |
| 5604 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5605 |
| 1630 | 5606 _success_msg="${_success_msg} $d |
| 5607 " | |
| 5608 elif [ "$rc" = "$RENEW_SKIP" ]; then | |
| 5609 if [ $_error_level -gt $NOTIFY_LEVEL_SKIP ]; then | |
| 5610 _error_level="$NOTIFY_LEVEL_SKIP" | |
| 5611 _notify_code=$RENEW_SKIP | |
| 5612 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5613 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5614 if [ $_set_level -ge $NOTIFY_LEVEL_SKIP ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5615 if [ "$NOTIFY_MODE" = "$NOTIFY_MODE_CERT" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5616 _send_notify "Renew $d skipped" "Good, the cert is skipped." "$NOTIFY_HOOK" "$RENEW_SKIP" |
| 1630 | 5617 fi |
| 5618 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5619 |
| 1630 | 5620 _info "Skipped $d" |
| 5621 _skipped_msg="${_skipped_msg} $d | |
| 5622 " | |
| 5623 else | |
| 5624 if [ $_error_level -gt $NOTIFY_LEVEL_ERROR ]; then | |
| 5625 _error_level="$NOTIFY_LEVEL_ERROR" | |
| 5626 _notify_code=1 | |
| 5627 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5628 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5629 if [ $_set_level -ge $NOTIFY_LEVEL_ERROR ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5630 if [ "$NOTIFY_MODE" = "$NOTIFY_MODE_CERT" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5631 _send_notify "Renew $d error" "There is an error." "$NOTIFY_HOOK" 1 |
| 1630 | 5632 fi |
| 5633 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5634 |
| 1630 | 5635 _error_msg="${_error_msg} $d |
| 5636 " | |
| 5637 if [ "$_stopRenewOnError" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5638 _err "Error renewing $d, stopping." |
| 1630 | 5639 _ret="$rc" |
| 5640 break | |
| 5641 else | |
| 5642 _ret="$rc" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5643 _err "Error renewing $d." |
| 1630 | 5644 fi |
| 5645 fi | |
| 5646 done | |
| 5647 _debug _error_level "$_error_level" | |
| 5648 _debug _set_level "$_set_level" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5649 if [ $_error_level -le $_set_level ]; then |
| 1630 | 5650 if [ -z "$NOTIFY_MODE" ] || [ "$NOTIFY_MODE" = "$NOTIFY_MODE_BULK" ]; then |
| 5651 _msg_subject="Renew" | |
| 5652 if [ "$_error_msg" ]; then | |
| 5653 _msg_subject="${_msg_subject} Error" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5654 _msg_data="Errored certs: |
| 1630 | 5655 ${_error_msg} |
| 5656 " | |
| 5657 fi | |
| 5658 if [ "$_success_msg" ]; then | |
| 5659 _msg_subject="${_msg_subject} Success" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5660 _msg_data="${_msg_data}Successful certs: |
| 1630 | 5661 ${_success_msg} |
| 5662 " | |
| 5663 fi | |
| 5664 if [ "$_skipped_msg" ]; then | |
| 5665 _msg_subject="${_msg_subject} Skipped" | |
| 5666 _msg_data="${_msg_data}Skipped certs: | |
| 5667 ${_skipped_msg} | |
| 5668 " | |
| 5669 fi | |
| 5670 | |
| 5671 _send_notify "$_msg_subject" "$_msg_data" "$NOTIFY_HOOK" "$_notify_code" | |
| 5672 fi | |
| 5673 fi | |
| 5674 | |
| 5675 return "$_ret" | |
| 5676 } | |
| 5677 | |
| 5678 #csr webroot | |
| 5679 signcsr() { | |
| 5680 _csrfile="$1" | |
| 5681 _csrW="$2" | |
| 5682 if [ -z "$_csrfile" ] || [ -z "$_csrW" ]; then | |
| 5683 _usage "Usage: $PROJECT_ENTRY --sign-csr --csr <csr-file> --webroot <directory>" | |
| 5684 return 1 | |
| 5685 fi | |
| 5686 | |
| 5687 _real_cert="$3" | |
| 5688 _real_key="$4" | |
| 5689 _real_ca="$5" | |
| 5690 _reload_cmd="$6" | |
| 5691 _real_fullchain="$7" | |
| 5692 _pre_hook="${8}" | |
| 5693 _post_hook="${9}" | |
| 5694 _renew_hook="${10}" | |
| 5695 _local_addr="${11}" | |
| 5696 _challenge_alias="${12}" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5697 _preferred_chain="${13}" |
| 1630 | 5698 |
| 5699 _csrsubj=$(_readSubjectFromCSR "$_csrfile") | |
| 5700 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5701 _err "Cannot read subject from CSR: $_csrfile" |
| 1630 | 5702 return 1 |
| 5703 fi | |
| 5704 _debug _csrsubj "$_csrsubj" | |
| 5705 if _contains "$_csrsubj" ' ' || ! _contains "$_csrsubj" '.'; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5706 _info "It seems that the subject $_csrsubj is not a valid domain name. Dropping it." |
| 1630 | 5707 _csrsubj="" |
| 5708 fi | |
| 5709 | |
| 5710 _csrdomainlist=$(_readSubjectAltNamesFromCSR "$_csrfile") | |
| 5711 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5712 _err "Cannot read domain list from CSR: $_csrfile" |
| 1630 | 5713 return 1 |
| 5714 fi | |
| 5715 _debug "_csrdomainlist" "$_csrdomainlist" | |
| 5716 | |
| 5717 if [ -z "$_csrsubj" ]; then | |
| 5718 _csrsubj="$(_getfield "$_csrdomainlist" 1)" | |
| 5719 _debug _csrsubj "$_csrsubj" | |
| 5720 _csrdomainlist="$(echo "$_csrdomainlist" | cut -d , -f 2-)" | |
| 5721 _debug "_csrdomainlist" "$_csrdomainlist" | |
| 5722 fi | |
| 5723 | |
| 5724 if [ -z "$_csrsubj" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5725 _err "Cannot read subject from CSR: $_csrfile" |
| 1630 | 5726 return 1 |
| 5727 fi | |
| 5728 | |
| 5729 _csrkeylength=$(_readKeyLengthFromCSR "$_csrfile") | |
| 5730 if [ "$?" != "0" ] || [ -z "$_csrkeylength" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5731 _err "Cannot read key length from CSR: $_csrfile" |
| 1630 | 5732 return 1 |
| 5733 fi | |
| 5734 | |
| 5735 _initpath "$_csrsubj" "$_csrkeylength" | |
| 5736 mkdir -p "$DOMAIN_PATH" | |
| 5737 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5738 _info "Copying CSR to: $CSR_PATH" |
| 1630 | 5739 cp "$_csrfile" "$CSR_PATH" |
| 5740 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5741 issue "$_csrW" "$_csrsubj" "$_csrdomainlist" "$_csrkeylength" "$_real_cert" "$_real_key" "$_real_ca" "$_reload_cmd" "$_real_fullchain" "$_pre_hook" "$_post_hook" "$_renew_hook" "$_local_addr" "$_challenge_alias" "$_preferred_chain" |
| 1630 | 5742 |
| 5743 } | |
| 5744 | |
| 5745 showcsr() { | |
| 5746 _csrfile="$1" | |
| 5747 _csrd="$2" | |
| 5748 if [ -z "$_csrfile" ] && [ -z "$_csrd" ]; then | |
| 5749 _usage "Usage: $PROJECT_ENTRY --show-csr --csr <csr-file>" | |
| 5750 return 1 | |
| 5751 fi | |
| 5752 | |
| 5753 _initpath | |
| 5754 | |
| 5755 _csrsubj=$(_readSubjectFromCSR "$_csrfile") | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5756 if [ "$?" != "0" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5757 _err "Cannot read subject from CSR: $_csrfile" |
| 1630 | 5758 return 1 |
| 5759 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5760 if [ -z "$_csrsubj" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5761 _info "The subject is empty" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5762 fi |
| 1630 | 5763 |
| 5764 _info "Subject=$_csrsubj" | |
| 5765 | |
| 5766 _csrdomainlist=$(_readSubjectAltNamesFromCSR "$_csrfile") | |
| 5767 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5768 _err "Cannot read domain list from CSR: $_csrfile" |
| 1630 | 5769 return 1 |
| 5770 fi | |
| 5771 _debug "_csrdomainlist" "$_csrdomainlist" | |
| 5772 | |
| 5773 _info "SubjectAltNames=$_csrdomainlist" | |
| 5774 | |
| 5775 _csrkeylength=$(_readKeyLengthFromCSR "$_csrfile") | |
| 5776 if [ "$?" != "0" ] || [ -z "$_csrkeylength" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5777 _err "Cannot read key length from CSR: $_csrfile" |
| 1630 | 5778 return 1 |
| 5779 fi | |
| 5780 _info "KeyLength=$_csrkeylength" | |
| 5781 } | |
| 5782 | |
| 5783 #listraw domain | |
| 5784 list() { | |
| 5785 _raw="$1" | |
| 5786 _domain="$2" | |
| 5787 _initpath | |
| 5788 | |
| 5789 _sep="|" | |
| 5790 if [ "$_raw" ]; then | |
| 5791 if [ -z "$_domain" ]; then | |
| 5792 printf "%s\n" "Main_Domain${_sep}KeyLength${_sep}SAN_Domains${_sep}CA${_sep}Created${_sep}Renew" | |
| 5793 fi | |
| 5794 for di in "${CERT_HOME}"/*.*/; do | |
| 5795 d=$(basename "$di") | |
| 5796 _debug d "$d" | |
| 5797 ( | |
| 5798 if _endswith "$d" "$ECC_SUFFIX"; then | |
| 5799 _isEcc="ecc" | |
| 5800 d=$(echo "$d" | cut -d "$ECC_SEP" -f 1) | |
| 5801 fi | |
| 5802 DOMAIN_CONF="$di/$d.conf" | |
| 5803 if [ -f "$DOMAIN_CONF" ]; then | |
| 5804 . "$DOMAIN_CONF" | |
| 5805 _ca="$(_getCAShortName "$Le_API")" | |
| 5806 if [ -z "$_domain" ]; then | |
| 5807 printf "%s\n" "$Le_Domain${_sep}\"$Le_Keylength\"${_sep}$Le_Alt${_sep}$_ca${_sep}$Le_CertCreateTimeStr${_sep}$Le_NextRenewTimeStr" | |
| 5808 else | |
| 5809 if [ "$_domain" = "$d" ]; then | |
| 5810 cat "$DOMAIN_CONF" | |
| 5811 fi | |
| 5812 fi | |
| 5813 fi | |
| 5814 ) | |
| 5815 done | |
| 5816 else | |
| 5817 if _exists column; then | |
| 5818 list "raw" "$_domain" | column -t -s "$_sep" | |
| 5819 else | |
| 5820 list "raw" "$_domain" | tr "$_sep" '\t' | |
| 5821 fi | |
| 5822 fi | |
| 5823 | |
| 5824 } | |
| 5825 | |
| 5826 _deploy() { | |
| 5827 _d="$1" | |
| 5828 _hooks="$2" | |
| 5829 | |
| 5830 for _d_api in $(echo "$_hooks" | tr ',' " "); do | |
| 5831 _deployApi="$(_findHook "$_d" $_SUB_FOLDER_DEPLOY "$_d_api")" | |
| 5832 if [ -z "$_deployApi" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5833 _err "The deploy hook $_d_api was not found." |
| 1630 | 5834 return 1 |
| 5835 fi | |
| 5836 _debug _deployApi "$_deployApi" | |
| 5837 | |
| 5838 if ! ( | |
| 5839 if ! . "$_deployApi"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5840 _err "Error loading file $_deployApi. Please check your API file and try again." |
| 1630 | 5841 return 1 |
| 5842 fi | |
| 5843 | |
| 5844 d_command="${_d_api}_deploy" | |
| 5845 if ! _exists "$d_command"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5846 _err "It seems that your API file is not correct. Make sure it has a function named: $d_command" |
| 1630 | 5847 return 1 |
| 5848 fi | |
| 5849 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5850 if ! $d_command "$_d" "$CERT_KEY_PATH" "$CERT_PATH" "$CA_CERT_PATH" "$CERT_FULLCHAIN_PATH" "$CERT_PFX_PATH"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5851 _err "Error deploying for domain: $_d" |
| 1630 | 5852 return 1 |
| 5853 fi | |
| 5854 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5855 _err "Error encountered while deploying." |
| 1630 | 5856 return 1 |
| 5857 else | |
| 5858 _info "$(__green Success)" | |
| 5859 fi | |
| 5860 done | |
| 5861 } | |
| 5862 | |
| 5863 #domain hooks | |
| 5864 deploy() { | |
| 5865 _d="$1" | |
| 5866 _hooks="$2" | |
| 5867 _isEcc="$3" | |
| 5868 if [ -z "$_hooks" ]; then | |
| 5869 _usage "Usage: $PROJECT_ENTRY --deploy --domain <domain.tld> --deploy-hook <hookname> [--ecc] " | |
| 5870 return 1 | |
| 5871 fi | |
| 5872 | |
| 5873 _initpath "$_d" "$_isEcc" | |
| 5874 if [ ! -d "$DOMAIN_PATH" ]; then | |
| 5875 _err "The domain '$_d' is not a cert name. You must use the cert name to specify the cert to install." | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5876 _err "Cannot find path: '$DOMAIN_PATH'" |
| 1630 | 5877 return 1 |
| 5878 fi | |
| 5879 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5880 _debug2 DOMAIN_CONF "$DOMAIN_CONF" |
| 1630 | 5881 . "$DOMAIN_CONF" |
| 5882 | |
| 5883 _savedomainconf Le_DeployHook "$_hooks" | |
| 5884 | |
| 5885 _deploy "$_d" "$_hooks" | |
| 5886 } | |
| 5887 | |
| 5888 installcert() { | |
| 5889 _main_domain="$1" | |
| 5890 if [ -z "$_main_domain" ]; then | |
| 5891 _usage "Usage: $PROJECT_ENTRY --install-cert --domain <domain.tld> [--ecc] [--cert-file <file>] [--key-file <file>] [--ca-file <file>] [ --reloadcmd <command>] [--fullchain-file <file>]" | |
| 5892 return 1 | |
| 5893 fi | |
| 5894 | |
| 5895 _real_cert="$2" | |
| 5896 _real_key="$3" | |
| 5897 _real_ca="$4" | |
| 5898 _reload_cmd="$5" | |
| 5899 _real_fullchain="$6" | |
| 5900 _isEcc="$7" | |
| 5901 | |
| 5902 _initpath "$_main_domain" "$_isEcc" | |
| 5903 if [ ! -d "$DOMAIN_PATH" ]; then | |
| 5904 _err "The domain '$_main_domain' is not a cert name. You must use the cert name to specify the cert to install." | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5905 _err "Cannot find path: '$DOMAIN_PATH'" |
| 1630 | 5906 return 1 |
| 5907 fi | |
| 5908 | |
| 5909 _savedomainconf "Le_RealCertPath" "$_real_cert" | |
| 5910 _savedomainconf "Le_RealCACertPath" "$_real_ca" | |
| 5911 _savedomainconf "Le_RealKeyPath" "$_real_key" | |
| 5912 _savedomainconf "Le_ReloadCmd" "$_reload_cmd" "base64" | |
| 5913 _savedomainconf "Le_RealFullChainPath" "$_real_fullchain" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5914 export Le_ForceNewDomainKey="$(_readdomainconf Le_ForceNewDomainKey)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5915 export Le_Next_Domain_Key |
| 1630 | 5916 _installcert "$_main_domain" "$_real_cert" "$_real_key" "$_real_ca" "$_real_fullchain" "$_reload_cmd" |
| 5917 } | |
| 5918 | |
| 5919 #domain cert key ca fullchain reloadcmd backup-prefix | |
| 5920 _installcert() { | |
| 5921 _main_domain="$1" | |
| 5922 _real_cert="$2" | |
| 5923 _real_key="$3" | |
| 5924 _real_ca="$4" | |
| 5925 _real_fullchain="$5" | |
| 5926 _reload_cmd="$6" | |
| 5927 _backup_prefix="$7" | |
| 5928 | |
| 5929 if [ "$_real_cert" = "$NO_VALUE" ]; then | |
| 5930 _real_cert="" | |
| 5931 fi | |
| 5932 if [ "$_real_key" = "$NO_VALUE" ]; then | |
| 5933 _real_key="" | |
| 5934 fi | |
| 5935 if [ "$_real_ca" = "$NO_VALUE" ]; then | |
| 5936 _real_ca="" | |
| 5937 fi | |
| 5938 if [ "$_reload_cmd" = "$NO_VALUE" ]; then | |
| 5939 _reload_cmd="" | |
| 5940 fi | |
| 5941 if [ "$_real_fullchain" = "$NO_VALUE" ]; then | |
| 5942 _real_fullchain="" | |
| 5943 fi | |
| 5944 | |
| 5945 _backup_path="$DOMAIN_BACKUP_PATH/$_backup_prefix" | |
| 5946 mkdir -p "$_backup_path" | |
| 5947 | |
| 5948 if [ "$_real_cert" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5949 _info "Installing cert to: $_real_cert" |
| 1630 | 5950 if [ -f "$_real_cert" ] && [ ! "$_ACME_IS_RENEW" ]; then |
| 5951 cp "$_real_cert" "$_backup_path/cert.bak" | |
| 5952 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5953 if [ "$CERT_PATH" != "$_real_cert" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5954 cat "$CERT_PATH" >"$_real_cert" || return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5955 fi |
| 1630 | 5956 fi |
| 5957 | |
| 5958 if [ "$_real_ca" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5959 _info "Installing CA to: $_real_ca" |
| 1630 | 5960 if [ "$_real_ca" = "$_real_cert" ]; then |
| 5961 echo "" >>"$_real_ca" | |
| 5962 cat "$CA_CERT_PATH" >>"$_real_ca" || return 1 | |
| 5963 else | |
| 5964 if [ -f "$_real_ca" ] && [ ! "$_ACME_IS_RENEW" ]; then | |
| 5965 cp "$_real_ca" "$_backup_path/ca.bak" | |
| 5966 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5967 if [ "$CA_CERT_PATH" != "$_real_ca" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5968 cat "$CA_CERT_PATH" >"$_real_ca" || return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5969 fi |
| 1630 | 5970 fi |
| 5971 fi | |
| 5972 | |
| 5973 if [ "$_real_key" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5974 _info "Installing key to: $_real_key" |
| 1630 | 5975 if [ -f "$_real_key" ] && [ ! "$_ACME_IS_RENEW" ]; then |
| 5976 cp "$_real_key" "$_backup_path/key.bak" | |
| 5977 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5978 if [ "$CERT_KEY_PATH" != "$_real_key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5979 if [ -f "$_real_key" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5980 cat "$CERT_KEY_PATH" >"$_real_key" || return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5981 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5982 touch "$_real_key" || return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5983 chmod 600 "$_real_key" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5984 cat "$CERT_KEY_PATH" >"$_real_key" || return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5985 fi |
| 1630 | 5986 fi |
| 5987 fi | |
| 5988 | |
| 5989 if [ "$_real_fullchain" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5990 _info "Installing full chain to: $_real_fullchain" |
| 1630 | 5991 if [ -f "$_real_fullchain" ] && [ ! "$_ACME_IS_RENEW" ]; then |
| 5992 cp "$_real_fullchain" "$_backup_path/fullchain.bak" | |
| 5993 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5994 if [ "$_real_fullchain" != "$CERT_FULLCHAIN_PATH" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5995 cat "$CERT_FULLCHAIN_PATH" >"$_real_fullchain" || return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
5996 fi |
| 1630 | 5997 fi |
| 5998 | |
| 5999 if [ "$_reload_cmd" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6000 _info "Running reload cmd: $_reload_cmd" |
| 1630 | 6001 if ( |
| 6002 export CERT_PATH | |
| 6003 export CERT_KEY_PATH | |
| 6004 export CA_CERT_PATH | |
| 6005 export CERT_FULLCHAIN_PATH | |
| 6006 export Le_Domain="$_main_domain" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6007 export Le_ForceNewDomainKey |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6008 export Le_Next_Domain_Key |
| 1630 | 6009 cd "$DOMAIN_PATH" && eval "$_reload_cmd" |
| 6010 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6011 _info "$(__green "Reload successful")" |
| 1630 | 6012 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6013 _err "Reload error for: $_main_domain" |
| 1630 | 6014 fi |
| 6015 fi | |
| 6016 | |
| 6017 } | |
| 6018 | |
| 6019 __read_password() { | |
| 6020 unset _pp | |
| 6021 prompt="Enter Password:" | |
| 6022 while IFS= read -p "$prompt" -r -s -n 1 char; do | |
| 6023 if [ "$char" = $'\0' ]; then | |
| 6024 break | |
| 6025 fi | |
| 6026 prompt='*' | |
| 6027 _pp="$_pp$char" | |
| 6028 done | |
| 6029 echo "$_pp" | |
| 6030 } | |
| 6031 | |
| 6032 _install_win_taskscheduler() { | |
| 6033 _lesh="$1" | |
| 6034 _centry="$2" | |
| 6035 _randomminute="$3" | |
| 6036 if ! _exists cygpath; then | |
| 6037 _err "cygpath not found" | |
| 6038 return 1 | |
| 6039 fi | |
| 6040 if ! _exists schtasks; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6041 _err "schtasks.exe was not found, are you on Windows?" |
| 1630 | 6042 return 1 |
| 6043 fi | |
| 6044 _winbash="$(cygpath -w $(which bash))" | |
| 6045 _debug _winbash "$_winbash" | |
| 6046 if [ -z "$_winbash" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6047 _err "Cannot find bash path" |
| 1630 | 6048 return 1 |
| 6049 fi | |
| 6050 _myname="$(whoami)" | |
| 6051 _debug "_myname" "$_myname" | |
| 6052 if [ -z "$_myname" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6053 _err "Can not find own username" |
| 1630 | 6054 return 1 |
| 6055 fi | |
| 6056 _debug "_lesh" "$_lesh" | |
| 6057 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6058 _info "To install the scheduler task to your Windows account, you must input your Windows password." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6059 _info "$PROJECT_NAME will not save your password." |
| 1630 | 6060 _info "Please input your Windows password for: $(__green "$_myname")" |
| 6061 _password="$(__read_password)" | |
| 6062 #SCHTASKS.exe '/create' '/SC' 'DAILY' '/TN' "$_WINDOWS_SCHEDULER_NAME" '/F' '/ST' "00:$_randomminute" '/RU' "$_myname" '/RP' "$_password" '/TR' "$_winbash -l -c '$_lesh --cron --home \"$LE_WORKING_DIR\" $_centry'" >/dev/null | |
| 6063 echo SCHTASKS.exe '/create' '/SC' 'DAILY' '/TN' "$_WINDOWS_SCHEDULER_NAME" '/F' '/ST' "00:$_randomminute" '/RU' "$_myname" '/RP' "$_password" '/TR' "\"$_winbash -l -c '$_lesh --cron --home \"$LE_WORKING_DIR\" $_centry'\"" | cmd.exe >/dev/null | |
| 6064 echo | |
| 6065 | |
| 6066 } | |
| 6067 | |
| 6068 _uninstall_win_taskscheduler() { | |
| 6069 if ! _exists schtasks; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6070 _err "schtasks.exe was not found, are you on Windows?" |
| 1630 | 6071 return 1 |
| 6072 fi | |
| 6073 if ! echo SCHTASKS /query /tn "$_WINDOWS_SCHEDULER_NAME" | cmd.exe >/dev/null; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6074 _debug "scheduler $_WINDOWS_SCHEDULER_NAME was not found." |
| 1630 | 6075 else |
| 6076 _info "Removing $_WINDOWS_SCHEDULER_NAME" | |
| 6077 echo SCHTASKS /delete /f /tn "$_WINDOWS_SCHEDULER_NAME" | cmd.exe >/dev/null | |
| 6078 fi | |
| 6079 } | |
| 6080 | |
| 6081 #confighome | |
| 6082 installcronjob() { | |
| 6083 _c_home="$1" | |
| 6084 _initpath | |
| 6085 _CRONTAB="crontab" | |
| 6086 if [ -f "$LE_WORKING_DIR/$PROJECT_ENTRY" ]; then | |
| 6087 lesh="\"$LE_WORKING_DIR\"/$PROJECT_ENTRY" | |
| 6088 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6089 _debug "_SCRIPT_" "$_SCRIPT_" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6090 _script="$(_readlink "$_SCRIPT_")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6091 _debug _script "$_script" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6092 if [ -f "$_script" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6093 _info "Using the current script from: $_script" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6094 lesh="$_script" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6095 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6096 _err "Cannot install cronjob, $PROJECT_ENTRY not found." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6097 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6098 fi |
| 1630 | 6099 fi |
| 6100 if [ "$_c_home" ]; then | |
| 6101 _c_entry="--config-home \"$_c_home\" " | |
| 6102 fi | |
| 6103 _t=$(_time) | |
| 6104 random_minute=$(_math $_t % 60) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6105 random_hour=$(_math $_t / 60 % 24) |
| 1630 | 6106 |
| 6107 if ! _exists "$_CRONTAB" && _exists "fcrontab"; then | |
| 6108 _CRONTAB="fcrontab" | |
| 6109 fi | |
| 6110 | |
| 6111 if ! _exists "$_CRONTAB"; then | |
| 6112 if _exists cygpath && _exists schtasks.exe; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6113 _info "It seems you are on Windows, let's install the Windows scheduler task." |
| 1630 | 6114 if _install_win_taskscheduler "$lesh" "$_c_entry" "$random_minute"; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6115 _info "Successfully installed Windows scheduler task." |
| 1630 | 6116 return 0 |
| 6117 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6118 _err "Failed to install Windows scheduler task." |
| 1630 | 6119 return 1 |
| 6120 fi | |
| 6121 fi | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6122 _err "crontab/fcrontab doesn't exist, so we cannot install cron jobs." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6123 _err "Your certs will not be renewed automatically." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6124 _err "You must add your own cron job to call '$PROJECT_ENTRY --cron' every day." |
| 1630 | 6125 return 1 |
| 6126 fi | |
| 6127 _info "Installing cron job" | |
| 6128 if ! $_CRONTAB -l | grep "$PROJECT_ENTRY --cron"; then | |
| 6129 if _exists uname && uname -a | grep SunOS >/dev/null; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6130 _CRONTAB_STDIN="$_CRONTAB --" |
| 1630 | 6131 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6132 _CRONTAB_STDIN="$_CRONTAB -" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6133 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6134 $_CRONTAB -l | { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6135 cat |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6136 echo "$random_minute $random_hour * * * $lesh --cron --home \"$LE_WORKING_DIR\" $_c_entry> /dev/null" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6137 } | $_CRONTAB_STDIN |
| 1630 | 6138 fi |
| 6139 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6140 _err "Failed to install cron job. You need to manually renew your certs." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6141 _err "Alternatively, you can add a cron job by yourself:" |
| 1630 | 6142 _err "$lesh --cron --home \"$LE_WORKING_DIR\" > /dev/null" |
| 6143 return 1 | |
| 6144 fi | |
| 6145 } | |
| 6146 | |
| 6147 uninstallcronjob() { | |
| 6148 _CRONTAB="crontab" | |
| 6149 if ! _exists "$_CRONTAB" && _exists "fcrontab"; then | |
| 6150 _CRONTAB="fcrontab" | |
| 6151 fi | |
| 6152 | |
| 6153 if ! _exists "$_CRONTAB"; then | |
| 6154 if _exists cygpath && _exists schtasks.exe; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6155 _info "It seems you are on Windows, let's uninstall the Windows scheduler task." |
| 1630 | 6156 if _uninstall_win_taskscheduler; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6157 _info "Successfully uninstalled Windows scheduler task." |
| 1630 | 6158 return 0 |
| 6159 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6160 _err "Failed to uninstall Windows scheduler task." |
| 1630 | 6161 return 1 |
| 6162 fi | |
| 6163 fi | |
| 6164 return | |
| 6165 fi | |
| 6166 _info "Removing cron job" | |
| 6167 cr="$($_CRONTAB -l | grep "$PROJECT_ENTRY --cron")" | |
| 6168 if [ "$cr" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6169 if _exists uname && uname -a | grep SunOS >/dev/null; then |
| 1630 | 6170 $_CRONTAB -l | sed "/$PROJECT_ENTRY --cron/d" | $_CRONTAB -- |
| 6171 else | |
| 6172 $_CRONTAB -l | sed "/$PROJECT_ENTRY --cron/d" | $_CRONTAB - | |
| 6173 fi | |
| 6174 LE_WORKING_DIR="$(echo "$cr" | cut -d ' ' -f 9 | tr -d '"')" | |
| 6175 _info LE_WORKING_DIR "$LE_WORKING_DIR" | |
| 6176 if _contains "$cr" "--config-home"; then | |
| 6177 LE_CONFIG_HOME="$(echo "$cr" | cut -d ' ' -f 11 | tr -d '"')" | |
| 6178 _debug LE_CONFIG_HOME "$LE_CONFIG_HOME" | |
| 6179 fi | |
| 6180 fi | |
| 6181 _initpath | |
| 6182 | |
| 6183 } | |
| 6184 | |
| 6185 #domain isECC revokeReason | |
| 6186 revoke() { | |
| 6187 Le_Domain="$1" | |
| 6188 if [ -z "$Le_Domain" ]; then | |
| 6189 _usage "Usage: $PROJECT_ENTRY --revoke --domain <domain.tld> [--ecc]" | |
| 6190 return 1 | |
| 6191 fi | |
| 6192 | |
| 6193 _isEcc="$2" | |
| 6194 _reason="$3" | |
| 6195 if [ -z "$_reason" ]; then | |
| 6196 _reason="0" | |
| 6197 fi | |
| 6198 _initpath "$Le_Domain" "$_isEcc" | |
| 6199 if [ ! -f "$DOMAIN_CONF" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6200 _err "$Le_Domain is not an issued domain, skipping." |
| 1630 | 6201 return 1 |
| 6202 fi | |
| 6203 | |
| 6204 if [ ! -f "$CERT_PATH" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6205 _err "Cert for $Le_Domain $CERT_PATH was not found, skipping." |
| 1630 | 6206 return 1 |
| 6207 fi | |
| 6208 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6209 . "$DOMAIN_CONF" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6210 _debug Le_API "$Le_API" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6211 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6212 if [ "$Le_API" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6213 if [ "$Le_API" != "$ACME_DIRECTORY" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6214 _clearAPI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6215 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6216 export ACME_DIRECTORY="$Le_API" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6217 #reload ca configs |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6218 ACCOUNT_KEY_PATH="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6219 ACCOUNT_JSON_PATH="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6220 CA_CONF="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6221 _debug3 "initpath again." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6222 _initpath "$Le_Domain" "$_isEcc" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6223 _initAPI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6224 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6225 |
| 1630 | 6226 cert="$(_getfile "${CERT_PATH}" "${BEGIN_CERT}" "${END_CERT}" | tr -d "\r\n" | _url_replace)" |
| 6227 | |
| 6228 if [ -z "$cert" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6229 _err "Cert for $Le_Domain is empty, skipping." |
| 1630 | 6230 return 1 |
| 6231 fi | |
| 6232 | |
| 6233 _initAPI | |
| 6234 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6235 data="{\"certificate\": \"$cert\",\"reason\":$_reason}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6236 |
| 1630 | 6237 uri="${ACME_REVOKE_CERT}" |
| 6238 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6239 _info "Trying account key first." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6240 if _send_signed_request "$uri" "$data" "" "$ACCOUNT_KEY_PATH"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6241 if [ -z "$response" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6242 _info "Successfully revoked." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6243 rm -f "$CERT_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6244 cat "$CERT_KEY_PATH" >"$CERT_KEY_PATH.revoked" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6245 cat "$CSR_PATH" >"$CSR_PATH.revoked" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6246 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6247 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6248 _err "Error revoking." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6249 _debug "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6250 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6251 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6252 |
| 1630 | 6253 if [ -f "$CERT_KEY_PATH" ]; then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6254 _info "Trying domain key." |
| 1630 | 6255 if _send_signed_request "$uri" "$data" "" "$CERT_KEY_PATH"; then |
| 6256 if [ -z "$response" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6257 _info "Successfully revoked." |
| 1630 | 6258 rm -f "$CERT_PATH" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6259 cat "$CERT_KEY_PATH" >"$CERT_KEY_PATH.revoked" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6260 cat "$CSR_PATH" >"$CSR_PATH.revoked" |
| 1630 | 6261 return 0 |
| 6262 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6263 _err "Error revoking using domain key." |
| 1630 | 6264 _err "$response" |
| 6265 fi | |
| 6266 fi | |
| 6267 else | |
| 6268 _info "Domain key file doesn't exist." | |
| 6269 fi | |
| 6270 return 1 | |
| 6271 } | |
| 6272 | |
| 6273 #domain ecc | |
| 6274 remove() { | |
| 6275 Le_Domain="$1" | |
| 6276 if [ -z "$Le_Domain" ]; then | |
| 6277 _usage "Usage: $PROJECT_ENTRY --remove --domain <domain.tld> [--ecc]" | |
| 6278 return 1 | |
| 6279 fi | |
| 6280 | |
| 6281 _isEcc="$2" | |
| 6282 | |
| 6283 _initpath "$Le_Domain" "$_isEcc" | |
| 6284 _removed_conf="$DOMAIN_CONF.removed" | |
| 6285 if [ ! -f "$DOMAIN_CONF" ]; then | |
| 6286 if [ -f "$_removed_conf" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6287 _err "$Le_Domain has already been removed. You can remove the folder by yourself: $DOMAIN_PATH" |
| 1630 | 6288 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6289 _err "$Le_Domain is not an issued domain, skipping." |
| 1630 | 6290 fi |
| 6291 return 1 | |
| 6292 fi | |
| 6293 | |
| 6294 if mv "$DOMAIN_CONF" "$_removed_conf"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6295 _info "$Le_Domain has been removed. The key and cert files are in $(__green $DOMAIN_PATH)" |
| 1630 | 6296 _info "You can remove them by yourself." |
| 6297 return 0 | |
| 6298 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6299 _err "Failed to remove $Le_Domain." |
| 1630 | 6300 return 1 |
| 6301 fi | |
| 6302 } | |
| 6303 | |
| 6304 #domain vtype | |
| 6305 _deactivate() { | |
| 6306 _d_domain="$1" | |
| 6307 _d_type="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6308 _initpath "$_d_domain" "$_d_type" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6309 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6310 . "$DOMAIN_CONF" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6311 _debug Le_API "$Le_API" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6312 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6313 if [ "$Le_API" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6314 if [ "$Le_API" != "$ACME_DIRECTORY" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6315 _clearAPI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6316 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6317 export ACME_DIRECTORY="$Le_API" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6318 #reload ca configs |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6319 ACCOUNT_KEY_PATH="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6320 ACCOUNT_JSON_PATH="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6321 CA_CONF="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6322 _debug3 "initpath again." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6323 _initpath "$Le_Domain" "$_d_type" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6324 _initAPI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6325 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6326 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6327 _identifiers="{\"type\":\"$(_getIdType "$_d_domain")\",\"value\":\"$_d_domain\"}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6328 if ! _send_signed_request "$ACME_NEW_ORDER" "{\"identifiers\": [$_identifiers]}"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6329 _err "Cannot get new order for domain." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6330 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6331 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6332 _authorizations_seg="$(echo "$response" | _egrep_o '"authorizations" *: *\[[^\]*\]' | cut -d '[' -f 2 | tr -d ']' | tr -d '"')" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6333 _debug2 _authorizations_seg "$_authorizations_seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6334 if [ -z "$_authorizations_seg" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6335 _err "_authorizations_seg not found." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6336 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6337 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6338 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6339 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6340 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6341 authzUri="$_authorizations_seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6342 _debug2 "authzUri" "$authzUri" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6343 if ! _send_signed_request "$authzUri"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6344 _err "Error making GET request for authz." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6345 _err "_authorizations_seg" "$_authorizations_seg" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6346 _err "authzUri" "$authzUri" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6347 _clearup |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6348 _on_issue_err "$_post_hook" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6349 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6350 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6351 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6352 response="$(echo "$response" | _normalizeJson)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6353 _debug2 response "$response" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6354 _URL_NAME="url" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6355 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6356 entries="$(echo "$response" | tr '][' '==' | _egrep_o "challenges\": *=[^=]*=" | tr '}{' '\n\n' | grep "\"status\": *\"valid\"")" |
| 1630 | 6357 if [ -z "$entries" ]; then |
| 6358 _info "No valid entries found." | |
| 6359 if [ -z "$thumbprint" ]; then | |
| 6360 thumbprint="$(__calc_account_thumbprint)" | |
| 6361 fi | |
| 6362 _debug "Trigger validation." | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6363 vtype="$(_getIdType "$_d_domain")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6364 # Fix for empty error objects in response which mess up the original code, adapted from fix suggested here: https://github.com/acmesh-official/acme.sh/issues/4933#issuecomment-1870499018 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6365 entry="$(echo "$response" | sed s/'"error":{}'/'"error":null'/ | _egrep_o '[^\{]*"type":"'$vtype'"[^\}]*')" |
| 1630 | 6366 _debug entry "$entry" |
| 6367 if [ -z "$entry" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6368 _err "$d: Cannot get domain token" |
| 1630 | 6369 return 1 |
| 6370 fi | |
| 6371 token="$(echo "$entry" | _egrep_o '"token":"[^"]*' | cut -d : -f 2 | tr -d '"')" | |
| 6372 _debug token "$token" | |
| 6373 | |
| 6374 uri="$(echo "$entry" | _egrep_o "\"$_URL_NAME\":\"[^\"]*" | cut -d : -f 2,3 | tr -d '"')" | |
| 6375 _debug uri "$uri" | |
| 6376 | |
| 6377 keyauthorization="$token.$thumbprint" | |
| 6378 _debug keyauthorization "$keyauthorization" | |
| 6379 __trigger_validation "$uri" "$keyauthorization" | |
| 6380 | |
| 6381 fi | |
| 6382 | |
| 6383 _d_i=0 | |
| 6384 _d_max_retry=$(echo "$entries" | wc -l) | |
| 6385 while [ "$_d_i" -lt "$_d_max_retry" ]; do | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6386 _info "Deactivating $_d_domain" |
| 1630 | 6387 _d_i="$(_math $_d_i + 1)" |
| 6388 entry="$(echo "$entries" | sed -n "${_d_i}p")" | |
| 6389 _debug entry "$entry" | |
| 6390 | |
| 6391 if [ -z "$entry" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6392 _info "No more valid entries found." |
| 1630 | 6393 break |
| 6394 fi | |
| 6395 | |
| 6396 _vtype="$(echo "$entry" | _egrep_o '"type": *"[^"]*"' | cut -d : -f 2 | tr -d '"')" | |
| 6397 _debug _vtype "$_vtype" | |
| 6398 _info "Found $_vtype" | |
| 6399 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6400 uri="$(echo "$entry" | _egrep_o "\"$_URL_NAME\":\"[^\"]*\"" | tr -d '" ' | cut -d : -f 2-)" |
| 1630 | 6401 _debug uri "$uri" |
| 6402 | |
| 6403 if [ "$_d_type" ] && [ "$_d_type" != "$_vtype" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6404 _info "Skipping $_vtype" |
| 1630 | 6405 continue |
| 6406 fi | |
| 6407 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6408 _info "Deactivating $_vtype" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6409 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6410 _djson="{\"status\":\"deactivated\"}" |
| 1630 | 6411 |
| 6412 if _send_signed_request "$authzUri" "$_djson" && _contains "$response" '"deactivated"'; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6413 _info "Successfully deactivated $_vtype." |
| 1630 | 6414 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6415 _err "Could not deactivate $_vtype." |
| 1630 | 6416 break |
| 6417 fi | |
| 6418 | |
| 6419 done | |
| 6420 _debug "$_d_i" | |
| 6421 if [ "$_d_i" -eq "$_d_max_retry" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6422 _info "Successfully deactivated!" |
| 1630 | 6423 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6424 _err "Deactivation failed." |
| 1630 | 6425 fi |
| 6426 | |
| 6427 } | |
| 6428 | |
| 6429 deactivate() { | |
| 6430 _d_domain_list="$1" | |
| 6431 _d_type="$2" | |
| 6432 _initpath | |
| 6433 _initAPI | |
| 6434 _debug _d_domain_list "$_d_domain_list" | |
| 6435 if [ -z "$(echo $_d_domain_list | cut -d , -f 1)" ]; then | |
| 6436 _usage "Usage: $PROJECT_ENTRY --deactivate --domain <domain.tld> [--domain <domain2.tld> ...]" | |
| 6437 return 1 | |
| 6438 fi | |
| 6439 for _d_dm in $(echo "$_d_domain_list" | tr ',' ' '); do | |
| 6440 if [ -z "$_d_dm" ] || [ "$_d_dm" = "$NO_VALUE" ]; then | |
| 6441 continue | |
| 6442 fi | |
| 6443 if ! _deactivate "$_d_dm" "$_d_type"; then | |
| 6444 return 1 | |
| 6445 fi | |
| 6446 done | |
| 6447 } | |
| 6448 | |
| 6449 # Detect profile file if not specified as environment variable | |
| 6450 _detect_profile() { | |
| 6451 if [ -n "$PROFILE" -a -f "$PROFILE" ]; then | |
| 6452 echo "$PROFILE" | |
| 6453 return | |
| 6454 fi | |
| 6455 | |
| 6456 DETECTED_PROFILE='' | |
| 6457 SHELLTYPE="$(basename "/$SHELL")" | |
| 6458 | |
| 6459 if [ "$SHELLTYPE" = "bash" ]; then | |
| 6460 if [ -f "$HOME/.bashrc" ]; then | |
| 6461 DETECTED_PROFILE="$HOME/.bashrc" | |
| 6462 elif [ -f "$HOME/.bash_profile" ]; then | |
| 6463 DETECTED_PROFILE="$HOME/.bash_profile" | |
| 6464 fi | |
| 6465 elif [ "$SHELLTYPE" = "zsh" ]; then | |
| 6466 DETECTED_PROFILE="$HOME/.zshrc" | |
| 6467 fi | |
| 6468 | |
| 6469 if [ -z "$DETECTED_PROFILE" ]; then | |
| 6470 if [ -f "$HOME/.profile" ]; then | |
| 6471 DETECTED_PROFILE="$HOME/.profile" | |
| 6472 elif [ -f "$HOME/.bashrc" ]; then | |
| 6473 DETECTED_PROFILE="$HOME/.bashrc" | |
| 6474 elif [ -f "$HOME/.bash_profile" ]; then | |
| 6475 DETECTED_PROFILE="$HOME/.bash_profile" | |
| 6476 elif [ -f "$HOME/.zshrc" ]; then | |
| 6477 DETECTED_PROFILE="$HOME/.zshrc" | |
| 6478 fi | |
| 6479 fi | |
| 6480 | |
| 6481 echo "$DETECTED_PROFILE" | |
| 6482 } | |
| 6483 | |
| 6484 _initconf() { | |
| 6485 _initpath | |
| 6486 if [ ! -f "$ACCOUNT_CONF_PATH" ]; then | |
| 6487 echo " | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6488 |
| 1630 | 6489 #LOG_FILE=\"$DEFAULT_LOG_FILE\" |
| 6490 #LOG_LEVEL=1 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6491 |
| 1630 | 6492 #AUTO_UPGRADE=\"1\" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6493 |
| 1630 | 6494 #NO_TIMESTAMP=1 |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6495 |
| 1630 | 6496 " >"$ACCOUNT_CONF_PATH" |
| 6497 fi | |
| 6498 } | |
| 6499 | |
| 6500 # nocron | |
| 6501 _precheck() { | |
| 6502 _nocron="$1" | |
| 6503 | |
| 6504 if ! _exists "curl" && ! _exists "wget"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6505 _err "Please install curl or wget first to enable access to HTTP resources." |
| 1630 | 6506 return 1 |
| 6507 fi | |
| 6508 | |
| 6509 if [ -z "$_nocron" ]; then | |
| 6510 if ! _exists "crontab" && ! _exists "fcrontab"; then | |
| 6511 if _exists cygpath && _exists schtasks.exe; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6512 _info "It seems you are on Windows, we will install the Windows scheduler task." |
| 1630 | 6513 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6514 _err "It is recommended to install crontab first. Try to install 'cron', 'crontab', 'crontabs' or 'vixie-cron'." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6515 _err "We need to set a cron job to renew the certs automatically." |
| 1630 | 6516 _err "Otherwise, your certs will not be able to be renewed automatically." |
| 6517 if [ -z "$FORCE" ]; then | |
| 6518 _err "Please add '--force' and try install again to go without crontab." | |
| 6519 _err "./$PROJECT_ENTRY --install --force" | |
| 6520 return 1 | |
| 6521 fi | |
| 6522 fi | |
| 6523 fi | |
| 6524 fi | |
| 6525 | |
| 6526 if ! _exists "${ACME_OPENSSL_BIN:-openssl}"; then | |
| 6527 _err "Please install openssl first. ACME_OPENSSL_BIN=$ACME_OPENSSL_BIN" | |
| 6528 _err "We need openssl to generate keys." | |
| 6529 return 1 | |
| 6530 fi | |
| 6531 | |
| 6532 if ! _exists "socat"; then | |
| 6533 _err "It is recommended to install socat first." | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6534 _err "We use socat for the standalone server, which is used for standalone mode." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6535 _err "If you don't want to use standalone mode, you may ignore this warning." |
| 1630 | 6536 fi |
| 6537 | |
| 6538 return 0 | |
| 6539 } | |
| 6540 | |
| 6541 _setShebang() { | |
| 6542 _file="$1" | |
| 6543 _shebang="$2" | |
| 6544 if [ -z "$_shebang" ]; then | |
| 6545 _usage "Usage: file shebang" | |
| 6546 return 1 | |
| 6547 fi | |
| 6548 cp "$_file" "$_file.tmp" | |
| 6549 echo "$_shebang" >"$_file" | |
| 6550 sed -n 2,99999p "$_file.tmp" >>"$_file" | |
| 6551 rm -f "$_file.tmp" | |
| 6552 } | |
| 6553 | |
| 6554 #confighome | |
| 6555 _installalias() { | |
| 6556 _c_home="$1" | |
| 6557 _initpath | |
| 6558 | |
| 6559 _envfile="$LE_WORKING_DIR/$PROJECT_ENTRY.env" | |
| 6560 if [ "$_upgrading" ] && [ "$_upgrading" = "1" ]; then | |
| 6561 echo "$(cat "$_envfile")" | sed "s|^LE_WORKING_DIR.*$||" >"$_envfile" | |
| 6562 echo "$(cat "$_envfile")" | sed "s|^alias le.*$||" >"$_envfile" | |
| 6563 echo "$(cat "$_envfile")" | sed "s|^alias le.sh.*$||" >"$_envfile" | |
| 6564 fi | |
| 6565 | |
| 6566 if [ "$_c_home" ]; then | |
| 6567 _c_entry=" --config-home '$_c_home'" | |
| 6568 fi | |
| 6569 | |
| 6570 _setopt "$_envfile" "export LE_WORKING_DIR" "=" "\"$LE_WORKING_DIR\"" | |
| 6571 if [ "$_c_home" ]; then | |
| 6572 _setopt "$_envfile" "export LE_CONFIG_HOME" "=" "\"$LE_CONFIG_HOME\"" | |
| 6573 else | |
| 6574 _sed_i "/^export LE_CONFIG_HOME/d" "$_envfile" | |
| 6575 fi | |
| 6576 _setopt "$_envfile" "alias $PROJECT_ENTRY" "=" "\"$LE_WORKING_DIR/$PROJECT_ENTRY$_c_entry\"" | |
| 6577 | |
| 6578 _profile="$(_detect_profile)" | |
| 6579 if [ "$_profile" ]; then | |
| 6580 _debug "Found profile: $_profile" | |
| 6581 _info "Installing alias to '$_profile'" | |
| 6582 _setopt "$_profile" ". \"$_envfile\"" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6583 _info "Close and reopen your terminal to start using $PROJECT_NAME" |
| 1630 | 6584 else |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6585 _info "No profile has been found, you will need to change your working directory to $LE_WORKING_DIR to use $PROJECT_NAME" |
| 1630 | 6586 fi |
| 6587 | |
| 6588 #for csh | |
| 6589 _cshfile="$LE_WORKING_DIR/$PROJECT_ENTRY.csh" | |
| 6590 _csh_profile="$HOME/.cshrc" | |
| 6591 if [ -f "$_csh_profile" ]; then | |
| 6592 _info "Installing alias to '$_csh_profile'" | |
| 6593 _setopt "$_cshfile" "setenv LE_WORKING_DIR" " " "\"$LE_WORKING_DIR\"" | |
| 6594 if [ "$_c_home" ]; then | |
| 6595 _setopt "$_cshfile" "setenv LE_CONFIG_HOME" " " "\"$LE_CONFIG_HOME\"" | |
| 6596 else | |
| 6597 _sed_i "/^setenv LE_CONFIG_HOME/d" "$_cshfile" | |
| 6598 fi | |
| 6599 _setopt "$_cshfile" "alias $PROJECT_ENTRY" " " "\"$LE_WORKING_DIR/$PROJECT_ENTRY$_c_entry\"" | |
| 6600 _setopt "$_csh_profile" "source \"$_cshfile\"" | |
| 6601 fi | |
| 6602 | |
| 6603 #for tcsh | |
| 6604 _tcsh_profile="$HOME/.tcshrc" | |
| 6605 if [ -f "$_tcsh_profile" ]; then | |
| 6606 _info "Installing alias to '$_tcsh_profile'" | |
| 6607 _setopt "$_cshfile" "setenv LE_WORKING_DIR" " " "\"$LE_WORKING_DIR\"" | |
| 6608 if [ "$_c_home" ]; then | |
| 6609 _setopt "$_cshfile" "setenv LE_CONFIG_HOME" " " "\"$LE_CONFIG_HOME\"" | |
| 6610 fi | |
| 6611 _setopt "$_cshfile" "alias $PROJECT_ENTRY" " " "\"$LE_WORKING_DIR/$PROJECT_ENTRY$_c_entry\"" | |
| 6612 _setopt "$_tcsh_profile" "source \"$_cshfile\"" | |
| 6613 fi | |
| 6614 | |
| 6615 } | |
| 6616 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6617 # nocron confighome noprofile accountemail |
| 1630 | 6618 install() { |
| 6619 | |
| 6620 if [ -z "$LE_WORKING_DIR" ]; then | |
| 6621 LE_WORKING_DIR="$DEFAULT_INSTALL_HOME" | |
| 6622 fi | |
| 6623 | |
| 6624 _nocron="$1" | |
| 6625 _c_home="$2" | |
| 6626 _noprofile="$3" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6627 _accountemail="$4" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6628 |
| 1630 | 6629 if ! _initpath; then |
| 6630 _err "Install failed." | |
| 6631 return 1 | |
| 6632 fi | |
| 6633 if [ "$_nocron" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6634 _debug "Skipping cron job installation" |
| 1630 | 6635 fi |
| 6636 | |
| 6637 if [ "$_ACME_IN_CRON" != "1" ]; then | |
| 6638 if ! _precheck "$_nocron"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6639 _err "Pre-check failed, cannot install." |
| 1630 | 6640 return 1 |
| 6641 fi | |
| 6642 fi | |
| 6643 | |
| 6644 if [ -z "$_c_home" ] && [ "$LE_CONFIG_HOME" != "$LE_WORKING_DIR" ]; then | |
| 6645 _info "Using config home: $LE_CONFIG_HOME" | |
| 6646 _c_home="$LE_CONFIG_HOME" | |
| 6647 fi | |
| 6648 | |
| 6649 #convert from le | |
| 6650 if [ -d "$HOME/.le" ]; then | |
| 6651 for envfile in "le.env" "le.sh.env"; do | |
| 6652 if [ -f "$HOME/.le/$envfile" ]; then | |
| 6653 if grep "le.sh" "$HOME/.le/$envfile" >/dev/null; then | |
| 6654 _upgrading="1" | |
| 6655 _info "You are upgrading from le.sh" | |
| 6656 _info "Renaming \"$HOME/.le\" to $LE_WORKING_DIR" | |
| 6657 mv "$HOME/.le" "$LE_WORKING_DIR" | |
| 6658 mv "$LE_WORKING_DIR/$envfile" "$LE_WORKING_DIR/$PROJECT_ENTRY.env" | |
| 6659 break | |
| 6660 fi | |
| 6661 fi | |
| 6662 done | |
| 6663 fi | |
| 6664 | |
| 6665 _info "Installing to $LE_WORKING_DIR" | |
| 6666 | |
| 6667 if [ ! -d "$LE_WORKING_DIR" ]; then | |
| 6668 if ! mkdir -p "$LE_WORKING_DIR"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6669 _err "Cannot create working dir: $LE_WORKING_DIR" |
| 1630 | 6670 return 1 |
| 6671 fi | |
| 6672 | |
| 6673 chmod 700 "$LE_WORKING_DIR" | |
| 6674 fi | |
| 6675 | |
| 6676 if [ ! -d "$LE_CONFIG_HOME" ]; then | |
| 6677 if ! mkdir -p "$LE_CONFIG_HOME"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6678 _err "Cannot create config dir: $LE_CONFIG_HOME" |
| 1630 | 6679 return 1 |
| 6680 fi | |
| 6681 | |
| 6682 chmod 700 "$LE_CONFIG_HOME" | |
| 6683 fi | |
| 6684 | |
| 6685 cp "$PROJECT_ENTRY" "$LE_WORKING_DIR/" && chmod +x "$LE_WORKING_DIR/$PROJECT_ENTRY" | |
| 6686 | |
| 6687 if [ "$?" != "0" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6688 _err "Installation failed, cannot copy $PROJECT_ENTRY" |
| 1630 | 6689 return 1 |
| 6690 fi | |
| 6691 | |
| 6692 _info "Installed to $LE_WORKING_DIR/$PROJECT_ENTRY" | |
| 6693 | |
| 6694 if [ "$_ACME_IN_CRON" != "1" ] && [ -z "$_noprofile" ]; then | |
| 6695 _installalias "$_c_home" | |
| 6696 fi | |
| 6697 | |
| 6698 for subf in $_SUB_FOLDERS; do | |
| 6699 if [ -d "$subf" ]; then | |
| 6700 mkdir -p "$LE_WORKING_DIR/$subf" | |
| 6701 cp "$subf"/* "$LE_WORKING_DIR"/"$subf"/ | |
| 6702 fi | |
| 6703 done | |
| 6704 | |
| 6705 if [ ! -f "$ACCOUNT_CONF_PATH" ]; then | |
| 6706 _initconf | |
| 6707 fi | |
| 6708 | |
| 6709 if [ "$_DEFAULT_ACCOUNT_CONF_PATH" != "$ACCOUNT_CONF_PATH" ]; then | |
| 6710 _setopt "$_DEFAULT_ACCOUNT_CONF_PATH" "ACCOUNT_CONF_PATH" "=" "\"$ACCOUNT_CONF_PATH\"" | |
| 6711 fi | |
| 6712 | |
| 6713 if [ "$_DEFAULT_CERT_HOME" != "$CERT_HOME" ]; then | |
| 6714 _saveaccountconf "CERT_HOME" "$CERT_HOME" | |
| 6715 fi | |
| 6716 | |
| 6717 if [ "$_DEFAULT_ACCOUNT_KEY_PATH" != "$ACCOUNT_KEY_PATH" ]; then | |
| 6718 _saveaccountconf "ACCOUNT_KEY_PATH" "$ACCOUNT_KEY_PATH" | |
| 6719 fi | |
| 6720 | |
| 6721 if [ -z "$_nocron" ]; then | |
| 6722 installcronjob "$_c_home" | |
| 6723 fi | |
| 6724 | |
| 6725 if [ -z "$NO_DETECT_SH" ]; then | |
| 6726 #Modify shebang | |
| 6727 if _exists bash; then | |
| 6728 _bash_path="$(bash -c "command -v bash 2>/dev/null")" | |
| 6729 if [ -z "$_bash_path" ]; then | |
| 6730 _bash_path="$(bash -c 'echo $SHELL')" | |
| 6731 fi | |
| 6732 fi | |
| 6733 if [ "$_bash_path" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6734 _info "bash has been found. Changing the shebang to use bash as preferred." |
| 1630 | 6735 _shebang='#!'"$_bash_path" |
| 6736 _setShebang "$LE_WORKING_DIR/$PROJECT_ENTRY" "$_shebang" | |
| 6737 for subf in $_SUB_FOLDERS; do | |
| 6738 if [ -d "$LE_WORKING_DIR/$subf" ]; then | |
| 6739 for _apifile in "$LE_WORKING_DIR/$subf/"*.sh; do | |
| 6740 _setShebang "$_apifile" "$_shebang" | |
| 6741 done | |
| 6742 fi | |
| 6743 done | |
| 6744 fi | |
| 6745 fi | |
| 6746 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6747 if [ "$_accountemail" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6748 _saveaccountconf "ACCOUNT_EMAIL" "$_accountemail" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6749 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6750 _saveaccountconf "UPGRADE_HASH" "$(_getUpgradeHash)" |
| 1630 | 6751 _info OK |
| 6752 } | |
| 6753 | |
| 6754 # nocron | |
| 6755 uninstall() { | |
| 6756 _nocron="$1" | |
| 6757 if [ -z "$_nocron" ]; then | |
| 6758 uninstallcronjob | |
| 6759 fi | |
| 6760 _initpath | |
| 6761 | |
| 6762 _uninstallalias | |
| 6763 | |
| 6764 rm -f "$LE_WORKING_DIR/$PROJECT_ENTRY" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6765 _info "The keys and certs are in \"$(__green "$LE_CONFIG_HOME")\". You can remove them by yourself." |
| 1630 | 6766 |
| 6767 } | |
| 6768 | |
| 6769 _uninstallalias() { | |
| 6770 _initpath | |
| 6771 | |
| 6772 _profile="$(_detect_profile)" | |
| 6773 if [ "$_profile" ]; then | |
| 6774 _info "Uninstalling alias from: '$_profile'" | |
| 6775 text="$(cat "$_profile")" | |
| 6776 echo "$text" | sed "s|^.*\"$LE_WORKING_DIR/$PROJECT_NAME.env\"$||" >"$_profile" | |
| 6777 fi | |
| 6778 | |
| 6779 _csh_profile="$HOME/.cshrc" | |
| 6780 if [ -f "$_csh_profile" ]; then | |
| 6781 _info "Uninstalling alias from: '$_csh_profile'" | |
| 6782 text="$(cat "$_csh_profile")" | |
| 6783 echo "$text" | sed "s|^.*\"$LE_WORKING_DIR/$PROJECT_NAME.csh\"$||" >"$_csh_profile" | |
| 6784 fi | |
| 6785 | |
| 6786 _tcsh_profile="$HOME/.tcshrc" | |
| 6787 if [ -f "$_tcsh_profile" ]; then | |
| 6788 _info "Uninstalling alias from: '$_csh_profile'" | |
| 6789 text="$(cat "$_tcsh_profile")" | |
| 6790 echo "$text" | sed "s|^.*\"$LE_WORKING_DIR/$PROJECT_NAME.csh\"$||" >"$_tcsh_profile" | |
| 6791 fi | |
| 6792 | |
| 6793 } | |
| 6794 | |
| 6795 cron() { | |
| 6796 export _ACME_IN_CRON=1 | |
| 6797 _initpath | |
| 6798 _info "$(__green "===Starting cron===")" | |
| 6799 if [ "$AUTO_UPGRADE" = "1" ]; then | |
| 6800 export LE_WORKING_DIR | |
| 6801 ( | |
| 6802 if ! upgrade; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6803 _err "Cron: Upgrade failed!" |
| 1630 | 6804 return 1 |
| 6805 fi | |
| 6806 ) | |
| 6807 . "$LE_WORKING_DIR/$PROJECT_ENTRY" >/dev/null | |
| 6808 | |
| 6809 if [ -t 1 ]; then | |
| 6810 __INTERACTIVE="1" | |
| 6811 fi | |
| 6812 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6813 _info "Automatically upgraded to: $VER" |
| 1630 | 6814 fi |
| 6815 renewAll | |
| 6816 _ret="$?" | |
| 6817 _ACME_IN_CRON="" | |
| 6818 _info "$(__green "===End cron===")" | |
| 6819 exit $_ret | |
| 6820 } | |
| 6821 | |
| 6822 version() { | |
| 6823 echo "$PROJECT" | |
| 6824 echo "v$VER" | |
| 6825 } | |
| 6826 | |
| 6827 # subject content hooks code | |
| 6828 _send_notify() { | |
| 6829 _nsubject="$1" | |
| 6830 _ncontent="$2" | |
| 6831 _nhooks="$3" | |
| 6832 _nerror="$4" | |
| 6833 | |
| 6834 if [ "$NOTIFY_LEVEL" = "$NOTIFY_LEVEL_DISABLE" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6835 _debug "The NOTIFY_LEVEL is $NOTIFY_LEVEL, which means it's disabled, so will just return." |
| 1630 | 6836 return 0 |
| 6837 fi | |
| 6838 | |
| 6839 if [ -z "$_nhooks" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6840 _debug "The NOTIFY_HOOK is empty, will just return." |
| 1630 | 6841 return 0 |
| 6842 fi | |
| 6843 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6844 _nsource="$NOTIFY_SOURCE" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6845 if [ -z "$_nsource" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6846 _nsource="$(uname -n)" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6847 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6848 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6849 _nsubject="$_nsubject by $_nsource" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6850 |
| 1630 | 6851 _send_err=0 |
| 6852 for _n_hook in $(echo "$_nhooks" | tr ',' " "); do | |
| 6853 _n_hook_file="$(_findHook "" $_SUB_FOLDER_NOTIFY "$_n_hook")" | |
| 6854 _info "Sending via: $_n_hook" | |
| 6855 _debug "Found $_n_hook_file for $_n_hook" | |
| 6856 if [ -z "$_n_hook_file" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6857 _err "Cannot find the hook file for $_n_hook" |
| 1630 | 6858 continue |
| 6859 fi | |
| 6860 if ! ( | |
| 6861 if ! . "$_n_hook_file"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6862 _err "Error loading file $_n_hook_file. Please check your API file and try again." |
| 1630 | 6863 return 1 |
| 6864 fi | |
| 6865 | |
| 6866 d_command="${_n_hook}_send" | |
| 6867 if ! _exists "$d_command"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6868 _err "It seems that your API file is not correct. Make sure it has a function named: $d_command" |
| 1630 | 6869 return 1 |
| 6870 fi | |
| 6871 | |
| 6872 if ! $d_command "$_nsubject" "$_ncontent" "$_nerror"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6873 _err "Error sending message using $d_command" |
| 1630 | 6874 return 1 |
| 6875 fi | |
| 6876 | |
| 6877 return 0 | |
| 6878 ); then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6879 _err "Error setting $_n_hook_file." |
| 1630 | 6880 _send_err=1 |
| 6881 else | |
| 6882 _info "$_n_hook $(__green Success)" | |
| 6883 fi | |
| 6884 done | |
| 6885 return $_send_err | |
| 6886 | |
| 6887 } | |
| 6888 | |
| 6889 # hook | |
| 6890 _set_notify_hook() { | |
| 6891 _nhooks="$1" | |
| 6892 | |
| 6893 _test_subject="Hello, this is a notification from $PROJECT_NAME" | |
| 6894 _test_content="If you receive this message, your notification works." | |
| 6895 | |
| 6896 _send_notify "$_test_subject" "$_test_content" "$_nhooks" 0 | |
| 6897 | |
| 6898 } | |
| 6899 | |
| 6900 #[hook] [level] [mode] | |
| 6901 setnotify() { | |
| 6902 _nhook="$1" | |
| 6903 _nlevel="$2" | |
| 6904 _nmode="$3" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6905 _nsource="$4" |
| 1630 | 6906 |
| 6907 _initpath | |
| 6908 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6909 if [ -z "$_nhook$_nlevel$_nmode$_nsource" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6910 _usage "Usage: $PROJECT_ENTRY --set-notify [--notify-hook <hookname>] [--notify-level <0|1|2|3>] [--notify-mode <0|1>] [--notify-source <hostname>]" |
| 1630 | 6911 _usage "$_NOTIFY_WIKI" |
| 6912 return 1 | |
| 6913 fi | |
| 6914 | |
| 6915 if [ "$_nlevel" ]; then | |
| 6916 _info "Set notify level to: $_nlevel" | |
| 6917 export "NOTIFY_LEVEL=$_nlevel" | |
| 6918 _saveaccountconf "NOTIFY_LEVEL" "$NOTIFY_LEVEL" | |
| 6919 fi | |
| 6920 | |
| 6921 if [ "$_nmode" ]; then | |
| 6922 _info "Set notify mode to: $_nmode" | |
| 6923 export "NOTIFY_MODE=$_nmode" | |
| 6924 _saveaccountconf "NOTIFY_MODE" "$NOTIFY_MODE" | |
| 6925 fi | |
| 6926 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6927 if [ "$_nsource" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6928 _info "Set notify source to: $_nsource" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6929 export "NOTIFY_SOURCE=$_nsource" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6930 _saveaccountconf "NOTIFY_SOURCE" "$NOTIFY_SOURCE" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6931 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6932 |
| 1630 | 6933 if [ "$_nhook" ]; then |
| 6934 _info "Set notify hook to: $_nhook" | |
| 6935 if [ "$_nhook" = "$NO_VALUE" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6936 _info "Clearing notify hook" |
| 1630 | 6937 _clearaccountconf "NOTIFY_HOOK" |
| 6938 else | |
| 6939 if _set_notify_hook "$_nhook"; then | |
| 6940 export NOTIFY_HOOK="$_nhook" | |
| 6941 _saveaccountconf "NOTIFY_HOOK" "$NOTIFY_HOOK" | |
| 6942 return 0 | |
| 6943 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6944 _err "Cannot set notify hook to: $_nhook" |
| 1630 | 6945 return 1 |
| 6946 fi | |
| 6947 fi | |
| 6948 fi | |
| 6949 | |
| 6950 } | |
| 6951 | |
| 6952 showhelp() { | |
| 6953 _initpath | |
| 6954 version | |
| 6955 echo "Usage: $PROJECT_ENTRY <command> ... [parameters ...] | |
| 6956 Commands: | |
| 6957 -h, --help Show this help message. | |
| 6958 -v, --version Show version info. | |
| 6959 --install Install $PROJECT_NAME to your system. | |
| 6960 --uninstall Uninstall $PROJECT_NAME, and uninstall the cron job. | |
| 6961 --upgrade Upgrade $PROJECT_NAME to the latest code from $PROJECT. | |
| 6962 --issue Issue a cert. | |
| 6963 --deploy Deploy the cert to your server. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6964 -i, --install-cert Install the issued cert to Apache/nginx or any other server. |
| 1630 | 6965 -r, --renew Renew a cert. |
| 6966 --renew-all Renew all the certs. | |
| 6967 --revoke Revoke a cert. | |
| 6968 --remove Remove the cert from list of certs known to $PROJECT_NAME. | |
| 6969 --list List all the certs. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6970 --info Show the $PROJECT_NAME configs, or the configs for a domain with [-d domain] parameter. |
| 1630 | 6971 --to-pkcs12 Export the certificate and key to a pfx file. |
| 6972 --to-pkcs8 Convert to pkcs8 format. | |
| 6973 --sign-csr Issue a cert from an existing csr. | |
| 6974 --show-csr Show the content of a csr. | |
| 6975 -ccr, --create-csr Create CSR, professional use. | |
| 6976 --create-domain-key Create an domain private key, professional use. | |
| 6977 --update-account Update account info. | |
| 6978 --register-account Register account key. | |
| 6979 --deactivate-account Deactivate the account. | |
| 6980 --create-account-key Create an account private key, professional use. | |
| 6981 --install-cronjob Install the cron job to renew certs, you don't need to call this. The 'install' command can automatically install the cron job. | |
| 6982 --uninstall-cronjob Uninstall the cron job. The 'uninstall' command can do this automatically. | |
| 6983 --cron Run cron job to renew all the certs. | |
| 6984 --set-notify Set the cron notification hook, level or mode. | |
| 6985 --deactivate Deactivate the domain authz, professional use. | |
| 6986 --set-default-ca Used with '--server', Set the default CA to use. | |
| 6987 See: $_SERVER_WIKI | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6988 --set-default-chain Set the default preferred chain for a CA. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6989 See: $_PREFERRED_CHAIN_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6990 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6991 |
| 1630 | 6992 Parameters: |
| 6993 -d, --domain <domain.tld> Specifies a domain, used to issue, renew or revoke etc. | |
| 6994 --challenge-alias <domain.tld> The challenge domain alias for DNS alias mode. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6995 See: $_DNS_ALIAS_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6996 |
| 1630 | 6997 --domain-alias <domain.tld> The domain alias for DNS alias mode. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6998 See: $_DNS_ALIAS_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
6999 |
| 1630 | 7000 --preferred-chain <chain> If the CA offers multiple certificate chains, prefer the chain with an issuer matching this Subject Common Name. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7001 If no match, the default offered chain will be used. (default: empty) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7002 See: $_PREFERRED_CHAIN_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7003 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7004 --valid-to <date-time> Request the NotAfter field of the cert. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7005 See: $_VALIDITY_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7006 --valid-from <date-time> Request the NotBefore field of the cert. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7007 See: $_VALIDITY_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7008 |
| 1630 | 7009 -f, --force Force install, force cert renewal or override sudo restrictions. |
| 7010 --staging, --test Use staging server, for testing. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7011 --debug [0|1|2|3] Output debug info. Defaults to $DEBUG_LEVEL_DEFAULT if argument is omitted. |
| 1630 | 7012 --output-insecure Output all the sensitive messages. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7013 By default all the credentials/sensitive messages are hidden from the output/debug/log for security. |
| 1630 | 7014 -w, --webroot <directory> Specifies the web root folder for web root mode. |
| 7015 --standalone Use standalone mode. | |
| 7016 --alpn Use standalone alpn mode. | |
| 7017 --stateless Use stateless mode. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7018 See: $_STATELESS_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7019 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7020 --apache Use Apache mode. |
| 1630 | 7021 --dns [dns_hook] Use dns manual mode or dns api. Defaults to manual mode when argument is omitted. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7022 See: $_DNS_API_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7023 |
| 1630 | 7024 --dnssleep <seconds> The time in seconds to wait for all the txt records to propagate in dns api mode. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7025 It's not necessary to use this by default, $PROJECT_NAME polls dns status by DOH automatically. |
| 1630 | 7026 -k, --keylength <bits> Specifies the domain key length: 2048, 3072, 4096, 8192 or ec-256, ec-384, ec-521. |
| 7027 -ak, --accountkeylength <bits> Specifies the account key length: 2048, 3072, 4096 | |
| 7028 --log [file] Specifies the log file. Defaults to \"$DEFAULT_LOG_FILE\" if argument is omitted. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7029 --log-level <1|2> Specifies the log level, default is $DEFAULT_LOG_LEVEL. |
| 1630 | 7030 --syslog <0|3|6|7> Syslog level, 0: disable syslog, 3: error, 6: info, 7: debug. |
| 7031 --eab-kid <eab_key_id> Key Identifier for External Account Binding. | |
| 7032 --eab-hmac-key <eab_hmac_key> HMAC key for External Account Binding. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7033 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7034 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7035 These parameters are to install the cert to nginx/Apache or any other server after issue/renew a cert: |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7036 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7037 --cert-file <file> Path to copy the cert file to after issue/renew. |
| 1630 | 7038 --key-file <file> Path to copy the key file to after issue/renew. |
| 7039 --ca-file <file> Path to copy the intermediate cert file to after issue/renew. | |
| 7040 --fullchain-file <file> Path to copy the fullchain cert file to after issue/renew. | |
| 7041 --reloadcmd <command> Command to execute after issue/renew to reload the server. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7042 |
| 1630 | 7043 --server <server_uri> ACME Directory Resource URI. (default: $DEFAULT_CA) |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7044 See: $_SERVER_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7045 |
| 1630 | 7046 --accountconf <file> Specifies a customized account config file. |
| 7047 --home <directory> Specifies the home dir for $PROJECT_NAME. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7048 --cert-home <directory> Specifies the home dir to save all the certs. |
| 1630 | 7049 --config-home <directory> Specifies the home dir to save all the configurations. |
| 7050 --useragent <string> Specifies the user agent string. it will be saved for future use too. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7051 -m, --email <email> Specifies the account email, only valid for the '--install' and '--update-account' command. |
| 1630 | 7052 --accountkey <file> Specifies the account key path, only valid for the '--install' command. |
| 7053 --days <ndays> Specifies the days to renew the cert when using '--issue' command. The default value is $DEFAULT_RENEW days. | |
| 7054 --httpport <port> Specifies the standalone listening port. Only valid if the server is behind a reverse proxy or load balancer. | |
| 7055 --tlsport <port> Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer. | |
| 7056 --local-address <ip> Specifies the standalone/tls server listening address, in case you have multiple ip addresses. | |
| 7057 --listraw Only used for '--list' command, list the certs in raw format. | |
| 7058 -se, --stop-renew-on-error Only valid for '--renew-all' command. Stop if one cert has error in renewal. | |
| 7059 --insecure Do not check the server certificate, in some devices, the api server's certificate may not be trusted. | |
| 7060 --ca-bundle <file> Specifies the path to the CA certificate bundle to verify api server's certificate. | |
| 7061 --ca-path <directory> Specifies directory containing CA certificates in PEM format, used by wget or curl. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7062 --no-cron Only valid for '--install' command, which means: do not install the default cron job. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7063 In this case, the certs will not be renewed automatically. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7064 --no-profile Only valid for '--install' command, which means: do not install aliases to user profile. |
| 1630 | 7065 --no-color Do not output color text. |
| 7066 --force-color Force output of color text. Useful for non-interactive use with the aha tool for HTML E-Mails. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7067 --ecc Specifies use of the ECC cert. Only valid for '--install-cert', '--renew', '--remove ', '--revoke', |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7068 '--deploy', '--to-pkcs8', '--to-pkcs12' and '--create-csr'. |
| 1630 | 7069 --csr <file> Specifies the input csr. |
| 7070 --pre-hook <command> Command to be run before obtaining any certificates. | |
| 7071 --post-hook <command> Command to be run after attempting to obtain/renew certificates. Runs regardless of whether obtain/renew succeeded or failed. | |
| 7072 --renew-hook <command> Command to be run after each successfully renewed certificate. | |
| 7073 --deploy-hook <hookname> The hook file to deploy cert | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7074 --extended-key-usage <string> Manually define the CSR extended key usage value. The default is serverAuth,clientAuth. |
| 1630 | 7075 --ocsp, --ocsp-must-staple Generate OCSP-Must-Staple extension. |
| 7076 --always-force-new-domain-key Generate new domain key on renewal. Otherwise, the domain key is not changed by default. | |
| 7077 --auto-upgrade [0|1] Valid for '--upgrade' command, indicating whether to upgrade automatically in future. Defaults to 1 if argument is omitted. | |
| 7078 --listen-v4 Force standalone/tls server to listen at ipv4. | |
| 7079 --listen-v6 Force standalone/tls server to listen at ipv6. | |
| 7080 --openssl-bin <file> Specifies a custom openssl bin location. | |
| 7081 --use-wget Force to use wget, if you have both curl and wget installed. | |
| 7082 --yes-I-know-dns-manual-mode-enough-go-ahead-please Force use of dns manual mode. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7083 See: $_DNS_MANUAL_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7084 |
| 1630 | 7085 -b, --branch <branch> Only valid for '--upgrade' command, specifies the branch name to upgrade to. |
| 7086 --notify-level <0|1|2|3> Set the notification level: Default value is $NOTIFY_LEVEL_DEFAULT. | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7087 0: disabled, no notification will be sent. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7088 1: send notifications only when there is an error. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7089 2: send notifications when a cert is successfully renewed, or there is an error. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7090 3: send notifications when a cert is skipped, renewed, or error. |
| 1630 | 7091 --notify-mode <0|1> Set notification mode. Default value is $NOTIFY_MODE_DEFAULT. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7092 0: Bulk mode. Send all the domain's notifications in one message(mail). |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7093 1: Cert mode. Send a message for every single cert. |
| 1630 | 7094 --notify-hook <hookname> Set the notify hook |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7095 --notify-source <server name> Set the server name in the notification message |
| 1630 | 7096 --revoke-reason <0-10> The reason for revocation, can be used in conjunction with the '--revoke' command. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7097 See: $_REVOKE_WIKI |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7098 |
| 1630 | 7099 --password <password> Add a password to exported pfx file. Use with --to-pkcs12. |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7100 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7101 |
| 1630 | 7102 " |
| 7103 } | |
| 7104 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7105 installOnline() { |
| 1630 | 7106 _info "Installing from online archive." |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7107 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7108 _branch="$BRANCH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7109 if [ -z "$_branch" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7110 _branch="master" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7111 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7112 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7113 target="$PROJECT/archive/$_branch.tar.gz" |
| 1630 | 7114 _info "Downloading $target" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7115 localname="$_branch.tar.gz" |
| 1630 | 7116 if ! _get "$target" >$localname; then |
| 7117 _err "Download error." | |
| 7118 return 1 | |
| 7119 fi | |
| 7120 ( | |
| 7121 _info "Extracting $localname" | |
| 7122 if ! (tar xzf $localname || gtar xzf $localname); then | |
| 7123 _err "Extraction error." | |
| 7124 exit 1 | |
| 7125 fi | |
| 7126 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7127 cd "$PROJECT_NAME-$_branch" |
| 1630 | 7128 chmod +x $PROJECT_ENTRY |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7129 if ./$PROJECT_ENTRY --install "$@"; then |
| 1630 | 7130 _info "Install success!" |
| 7131 fi | |
| 7132 | |
| 7133 cd .. | |
| 7134 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7135 rm -rf "$PROJECT_NAME-$_branch" |
| 1630 | 7136 rm -f "$localname" |
| 7137 ) | |
| 7138 } | |
| 7139 | |
| 7140 _getRepoHash() { | |
| 7141 _hash_path=$1 | |
| 7142 shift | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7143 _hash_url="${PROJECT_API:-https://api.github.com/repos/acmesh-official}/$PROJECT_NAME/git/refs/$_hash_path" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7144 _get "$_hash_url" "" 30 | tr -d "\r\n" | tr '{},' '\n\n\n' | grep '"sha":' | cut -d '"' -f 4 |
| 1630 | 7145 } |
| 7146 | |
| 7147 _getUpgradeHash() { | |
| 7148 _b="$BRANCH" | |
| 7149 if [ -z "$_b" ]; then | |
| 7150 _b="master" | |
| 7151 fi | |
| 7152 _hash=$(_getRepoHash "heads/$_b") | |
| 7153 if [ -z "$_hash" ]; then _hash=$(_getRepoHash "tags/$_b"); fi | |
| 7154 echo $_hash | |
| 7155 } | |
| 7156 | |
| 7157 upgrade() { | |
| 7158 if ( | |
| 7159 _initpath | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7160 [ -z "$FORCE" ] && [ "$(_getUpgradeHash)" = "$(_readaccountconf "UPGRADE_HASH")" ] && _info "Already up to date!" && exit 0 |
| 1630 | 7161 export LE_WORKING_DIR |
| 7162 cd "$LE_WORKING_DIR" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7163 installOnline "--nocron" "--noprofile" |
| 1630 | 7164 ); then |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7165 _info "Upgrade successful!" |
| 1630 | 7166 exit 0 |
| 7167 else | |
| 7168 _err "Upgrade failed!" | |
| 7169 exit 1 | |
| 7170 fi | |
| 7171 } | |
| 7172 | |
| 7173 _processAccountConf() { | |
| 7174 if [ "$_useragent" ]; then | |
| 7175 _saveaccountconf "USER_AGENT" "$_useragent" | |
| 7176 elif [ "$USER_AGENT" ] && [ "$USER_AGENT" != "$DEFAULT_USER_AGENT" ]; then | |
| 7177 _saveaccountconf "USER_AGENT" "$USER_AGENT" | |
| 7178 fi | |
| 7179 | |
| 7180 if [ "$_openssl_bin" ]; then | |
| 7181 _saveaccountconf "ACME_OPENSSL_BIN" "$_openssl_bin" | |
| 7182 elif [ "$ACME_OPENSSL_BIN" ] && [ "$ACME_OPENSSL_BIN" != "$DEFAULT_OPENSSL_BIN" ]; then | |
| 7183 _saveaccountconf "ACME_OPENSSL_BIN" "$ACME_OPENSSL_BIN" | |
| 7184 fi | |
| 7185 | |
| 7186 if [ "$_auto_upgrade" ]; then | |
| 7187 _saveaccountconf "AUTO_UPGRADE" "$_auto_upgrade" | |
| 7188 elif [ "$AUTO_UPGRADE" ]; then | |
| 7189 _saveaccountconf "AUTO_UPGRADE" "$AUTO_UPGRADE" | |
| 7190 fi | |
| 7191 | |
| 7192 if [ "$_use_wget" ]; then | |
| 7193 _saveaccountconf "ACME_USE_WGET" "$_use_wget" | |
| 7194 elif [ "$ACME_USE_WGET" ]; then | |
| 7195 _saveaccountconf "ACME_USE_WGET" "$ACME_USE_WGET" | |
| 7196 fi | |
| 7197 | |
| 7198 } | |
| 7199 | |
| 7200 _checkSudo() { | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7201 if [ -z "$__INTERACTIVE" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7202 #don't check if it's not in an interactive shell |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7203 return 0 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7204 fi |
| 1630 | 7205 if [ "$SUDO_GID" ] && [ "$SUDO_COMMAND" ] && [ "$SUDO_USER" ] && [ "$SUDO_UID" ]; then |
| 7206 if [ "$SUDO_USER" = "root" ] && [ "$SUDO_UID" = "0" ]; then | |
| 7207 #it's root using sudo, no matter it's using sudo or not, just fine | |
| 7208 return 0 | |
| 7209 fi | |
| 7210 if [ -n "$SUDO_COMMAND" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7211 #it's a normal user doing "sudo su", or `sudo -i` or `sudo -s`, or `sudo su acmeuser1` |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7212 _endswith "$SUDO_COMMAND" /bin/su || _contains "$SUDO_COMMAND" "/bin/su " || grep "^$SUDO_COMMAND\$" /etc/shells >/dev/null 2>&1 |
| 1630 | 7213 return $? |
| 7214 fi | |
| 7215 #otherwise | |
| 7216 return 1 | |
| 7217 fi | |
| 7218 return 0 | |
| 7219 } | |
| 7220 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7221 #server #keylength |
| 1630 | 7222 _selectServer() { |
| 7223 _server="$1" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7224 _skeylength="$2" |
| 1630 | 7225 _server_lower="$(echo "$_server" | _lower_case)" |
| 7226 _sindex=0 | |
| 7227 for snames in $CA_NAMES; do | |
| 7228 snames="$(echo "$snames" | _lower_case)" | |
| 7229 _sindex="$(_math $_sindex + 1)" | |
| 7230 _debug2 "_selectServer try snames" "$snames" | |
| 7231 for sname in $(echo "$snames" | tr ',' ' '); do | |
| 7232 if [ "$_server_lower" = "$sname" ]; then | |
| 7233 _debug2 "_selectServer match $sname" | |
| 7234 _serverdir="$(_getfield "$CA_SERVERS" $_sindex)" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7235 if [ "$_serverdir" = "$CA_SSLCOM_RSA" ] && _isEccKey "$_skeylength"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7236 _serverdir="$CA_SSLCOM_ECC" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7237 fi |
| 1630 | 7238 _debug "Selected server: $_serverdir" |
| 7239 ACME_DIRECTORY="$_serverdir" | |
| 7240 export ACME_DIRECTORY | |
| 7241 return | |
| 7242 fi | |
| 7243 done | |
| 7244 done | |
| 7245 ACME_DIRECTORY="$_server" | |
| 7246 export ACME_DIRECTORY | |
| 7247 } | |
| 7248 | |
| 7249 #url | |
| 7250 _getCAShortName() { | |
| 7251 caurl="$1" | |
| 7252 if [ -z "$caurl" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7253 #use letsencrypt as default value if the Le_API is empty |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7254 #this case can only come from the old upgrading. |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7255 caurl="$CA_LETSENCRYPT_V2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7256 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7257 if [ "$CA_SSLCOM_ECC" = "$caurl" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7258 caurl="$CA_SSLCOM_RSA" #just hack to get the short name |
| 1630 | 7259 fi |
| 7260 caurl_lower="$(echo $caurl | _lower_case)" | |
| 7261 _sindex=0 | |
| 7262 for surl in $(echo "$CA_SERVERS" | _lower_case | tr , ' '); do | |
| 7263 _sindex="$(_math $_sindex + 1)" | |
| 7264 if [ "$caurl_lower" = "$surl" ]; then | |
| 7265 _nindex=0 | |
| 7266 for snames in $CA_NAMES; do | |
| 7267 _nindex="$(_math $_nindex + 1)" | |
| 7268 if [ $_nindex -ge $_sindex ]; then | |
| 7269 _getfield "$snames" 1 | |
| 7270 return | |
| 7271 fi | |
| 7272 done | |
| 7273 fi | |
| 7274 done | |
| 7275 echo "$caurl" | |
| 7276 } | |
| 7277 | |
| 7278 #set default ca to $ACME_DIRECTORY | |
| 7279 setdefaultca() { | |
| 7280 if [ -z "$ACME_DIRECTORY" ]; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7281 _err "Please provide a --server parameter." |
| 1630 | 7282 return 1 |
| 7283 fi | |
| 7284 _saveaccountconf "DEFAULT_ACME_SERVER" "$ACME_DIRECTORY" | |
| 7285 _info "Changed default CA to: $(__green "$ACME_DIRECTORY")" | |
| 7286 } | |
| 7287 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7288 #preferred-chain |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7289 setdefaultchain() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7290 _initpath |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7291 _preferred_chain="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7292 if [ -z "$_preferred_chain" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7293 _err "Please provide a value for '--preferred-chain'." |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7294 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7295 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7296 mkdir -p "$CA_DIR" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7297 _savecaconf "DEFAULT_PREFERRED_CHAIN" "$_preferred_chain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7298 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7299 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7300 #domain ecc |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7301 info() { |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7302 _domain="$1" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7303 _ecc="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7304 _initpath |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7305 if [ -z "$_domain" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7306 _debug "Show global configs" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7307 echo "LE_WORKING_DIR=$LE_WORKING_DIR" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7308 echo "LE_CONFIG_HOME=$LE_CONFIG_HOME" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7309 cat "$ACCOUNT_CONF_PATH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7310 else |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7311 _debug "Show domain configs" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7312 ( |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7313 _initpath "$_domain" "$_ecc" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7314 echo "DOMAIN_CONF=$DOMAIN_CONF" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7315 for seg in $(cat $DOMAIN_CONF | cut -d = -f 1); do |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7316 echo "$seg=$(_readdomainconf "$seg")" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7317 done |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7318 ) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7319 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7320 } |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7321 |
| 1630 | 7322 _process() { |
| 7323 _CMD="" | |
| 7324 _domain="" | |
| 7325 _altdomains="$NO_VALUE" | |
| 7326 _webroot="" | |
| 7327 _challenge_alias="" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7328 _keylength="$DEFAULT_DOMAIN_KEY_LENGTH" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7329 _accountkeylength="$DEFAULT_ACCOUNT_KEY_LENGTH" |
| 1630 | 7330 _cert_file="" |
| 7331 _key_file="" | |
| 7332 _ca_file="" | |
| 7333 _fullchain_file="" | |
| 7334 _reloadcmd="" | |
| 7335 _password="" | |
| 7336 _accountconf="" | |
| 7337 _useragent="" | |
| 7338 _accountemail="" | |
| 7339 _accountkey="" | |
| 7340 _certhome="" | |
| 7341 _confighome="" | |
| 7342 _httpport="" | |
| 7343 _tlsport="" | |
| 7344 _dnssleep="" | |
| 7345 _listraw="" | |
| 7346 _stopRenewOnError="" | |
| 7347 #_insecure="" | |
| 7348 _ca_bundle="" | |
| 7349 _ca_path="" | |
| 7350 _nocron="" | |
| 7351 _noprofile="" | |
| 7352 _ecc="" | |
| 7353 _csr="" | |
| 7354 _pre_hook="" | |
| 7355 _post_hook="" | |
| 7356 _renew_hook="" | |
| 7357 _deploy_hook="" | |
| 7358 _logfile="" | |
| 7359 _log="" | |
| 7360 _local_address="" | |
| 7361 _log_level="" | |
| 7362 _auto_upgrade="" | |
| 7363 _listen_v4="" | |
| 7364 _listen_v6="" | |
| 7365 _openssl_bin="" | |
| 7366 _syslog="" | |
| 7367 _use_wget="" | |
| 7368 _server="" | |
| 7369 _notify_hook="" | |
| 7370 _notify_level="" | |
| 7371 _notify_mode="" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7372 _notify_source="" |
| 1630 | 7373 _revoke_reason="" |
| 7374 _eab_kid="" | |
| 7375 _eab_hmac_key="" | |
| 7376 _preferred_chain="" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7377 _valid_from="" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7378 _valid_to="" |
| 1630 | 7379 while [ ${#} -gt 0 ]; do |
| 7380 case "${1}" in | |
| 7381 | |
| 7382 --help | -h) | |
| 7383 showhelp | |
| 7384 return | |
| 7385 ;; | |
| 7386 --version | -v) | |
| 7387 version | |
| 7388 return | |
| 7389 ;; | |
| 7390 --install) | |
| 7391 _CMD="install" | |
| 7392 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7393 --install-online) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7394 shift |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7395 installOnline "$@" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7396 return |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7397 ;; |
| 1630 | 7398 --uninstall) |
| 7399 _CMD="uninstall" | |
| 7400 ;; | |
| 7401 --upgrade) | |
| 7402 _CMD="upgrade" | |
| 7403 ;; | |
| 7404 --issue) | |
| 7405 _CMD="issue" | |
| 7406 ;; | |
| 7407 --deploy) | |
| 7408 _CMD="deploy" | |
| 7409 ;; | |
| 7410 --sign-csr | --signcsr) | |
| 7411 _CMD="signcsr" | |
| 7412 ;; | |
| 7413 --show-csr | --showcsr) | |
| 7414 _CMD="showcsr" | |
| 7415 ;; | |
| 7416 -i | --install-cert | --installcert) | |
| 7417 _CMD="installcert" | |
| 7418 ;; | |
| 7419 --renew | -r) | |
| 7420 _CMD="renew" | |
| 7421 ;; | |
| 7422 --renew-all | --renewAll | --renewall) | |
| 7423 _CMD="renewAll" | |
| 7424 ;; | |
| 7425 --revoke) | |
| 7426 _CMD="revoke" | |
| 7427 ;; | |
| 7428 --remove) | |
| 7429 _CMD="remove" | |
| 7430 ;; | |
| 7431 --list) | |
| 7432 _CMD="list" | |
| 7433 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7434 --info) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7435 _CMD="info" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7436 ;; |
| 1630 | 7437 --install-cronjob | --installcronjob) |
| 7438 _CMD="installcronjob" | |
| 7439 ;; | |
| 7440 --uninstall-cronjob | --uninstallcronjob) | |
| 7441 _CMD="uninstallcronjob" | |
| 7442 ;; | |
| 7443 --cron) | |
| 7444 _CMD="cron" | |
| 7445 ;; | |
| 7446 --to-pkcs12 | --to-pkcs | --toPkcs) | |
| 7447 _CMD="toPkcs" | |
| 7448 ;; | |
| 7449 --to-pkcs8 | --toPkcs8) | |
| 7450 _CMD="toPkcs8" | |
| 7451 ;; | |
| 7452 --create-account-key | --createAccountKey | --createaccountkey | -cak) | |
| 7453 _CMD="createAccountKey" | |
| 7454 ;; | |
| 7455 --create-domain-key | --createDomainKey | --createdomainkey | -cdk) | |
| 7456 _CMD="createDomainKey" | |
| 7457 ;; | |
| 7458 -ccr | --create-csr | --createCSR | --createcsr) | |
| 7459 _CMD="createCSR" | |
| 7460 ;; | |
| 7461 --deactivate) | |
| 7462 _CMD="deactivate" | |
| 7463 ;; | |
| 7464 --update-account | --updateaccount) | |
| 7465 _CMD="updateaccount" | |
| 7466 ;; | |
| 7467 --register-account | --registeraccount) | |
| 7468 _CMD="registeraccount" | |
| 7469 ;; | |
| 7470 --deactivate-account) | |
| 7471 _CMD="deactivateaccount" | |
| 7472 ;; | |
| 7473 --set-notify) | |
| 7474 _CMD="setnotify" | |
| 7475 ;; | |
| 7476 --set-default-ca) | |
| 7477 _CMD="setdefaultca" | |
| 7478 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7479 --set-default-chain) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7480 _CMD="setdefaultchain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7481 ;; |
| 1630 | 7482 -d | --domain) |
| 7483 _dvalue="$2" | |
| 7484 | |
| 7485 if [ "$_dvalue" ]; then | |
| 7486 if _startswith "$_dvalue" "-"; then | |
| 7487 _err "'$_dvalue' is not a valid domain for parameter '$1'" | |
| 7488 return 1 | |
| 7489 fi | |
| 7490 if _is_idn "$_dvalue" && ! _exists idn; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7491 _err "It seems that $_dvalue is an IDN (Internationalized Domain Names), please install the 'idn' command first." |
| 1630 | 7492 return 1 |
| 7493 fi | |
| 7494 | |
| 7495 if [ -z "$_domain" ]; then | |
| 7496 _domain="$_dvalue" | |
| 7497 else | |
| 7498 if [ "$_altdomains" = "$NO_VALUE" ]; then | |
| 7499 _altdomains="$_dvalue" | |
| 7500 else | |
| 7501 _altdomains="$_altdomains,$_dvalue" | |
| 7502 fi | |
| 7503 fi | |
| 7504 fi | |
| 7505 | |
| 7506 shift | |
| 7507 ;; | |
| 7508 | |
| 7509 -f | --force) | |
| 7510 FORCE="1" | |
| 7511 ;; | |
| 7512 --staging | --test) | |
| 7513 STAGE="1" | |
| 7514 ;; | |
| 7515 --server) | |
| 7516 _server="$2" | |
| 7517 shift | |
| 7518 ;; | |
| 7519 --debug) | |
| 7520 if [ -z "$2" ] || _startswith "$2" "-"; then | |
| 7521 DEBUG="$DEBUG_LEVEL_DEFAULT" | |
| 7522 else | |
| 7523 DEBUG="$2" | |
| 7524 shift | |
| 7525 fi | |
| 7526 ;; | |
| 7527 --output-insecure) | |
| 7528 export OUTPUT_INSECURE=1 | |
| 7529 ;; | |
| 7530 -w | --webroot) | |
| 7531 wvalue="$2" | |
| 7532 if [ -z "$_webroot" ]; then | |
| 7533 _webroot="$wvalue" | |
| 7534 else | |
| 7535 _webroot="$_webroot,$wvalue" | |
| 7536 fi | |
| 7537 shift | |
| 7538 ;; | |
| 7539 --challenge-alias) | |
| 7540 cvalue="$2" | |
| 7541 _challenge_alias="$_challenge_alias$cvalue," | |
| 7542 shift | |
| 7543 ;; | |
| 7544 --domain-alias) | |
| 7545 cvalue="$DNS_ALIAS_PREFIX$2" | |
| 7546 _challenge_alias="$_challenge_alias$cvalue," | |
| 7547 shift | |
| 7548 ;; | |
| 7549 --standalone) | |
| 7550 wvalue="$NO_VALUE" | |
| 7551 if [ -z "$_webroot" ]; then | |
| 7552 _webroot="$wvalue" | |
| 7553 else | |
| 7554 _webroot="$_webroot,$wvalue" | |
| 7555 fi | |
| 7556 ;; | |
| 7557 --alpn) | |
| 7558 wvalue="$W_ALPN" | |
| 7559 if [ -z "$_webroot" ]; then | |
| 7560 _webroot="$wvalue" | |
| 7561 else | |
| 7562 _webroot="$_webroot,$wvalue" | |
| 7563 fi | |
| 7564 ;; | |
| 7565 --stateless) | |
| 7566 wvalue="$MODE_STATELESS" | |
| 7567 if [ -z "$_webroot" ]; then | |
| 7568 _webroot="$wvalue" | |
| 7569 else | |
| 7570 _webroot="$_webroot,$wvalue" | |
| 7571 fi | |
| 7572 ;; | |
| 7573 --local-address) | |
| 7574 lvalue="$2" | |
| 7575 _local_address="$_local_address$lvalue," | |
| 7576 shift | |
| 7577 ;; | |
| 7578 --apache) | |
| 7579 wvalue="apache" | |
| 7580 if [ -z "$_webroot" ]; then | |
| 7581 _webroot="$wvalue" | |
| 7582 else | |
| 7583 _webroot="$_webroot,$wvalue" | |
| 7584 fi | |
| 7585 ;; | |
| 7586 --nginx) | |
| 7587 wvalue="$NGINX" | |
| 7588 if [ "$2" ] && ! _startswith "$2" "-"; then | |
| 7589 wvalue="$NGINX$2" | |
| 7590 shift | |
| 7591 fi | |
| 7592 if [ -z "$_webroot" ]; then | |
| 7593 _webroot="$wvalue" | |
| 7594 else | |
| 7595 _webroot="$_webroot,$wvalue" | |
| 7596 fi | |
| 7597 ;; | |
| 7598 --dns) | |
| 7599 wvalue="$W_DNS" | |
| 7600 if [ "$2" ] && ! _startswith "$2" "-"; then | |
| 7601 wvalue="$2" | |
| 7602 shift | |
| 7603 fi | |
| 7604 if [ -z "$_webroot" ]; then | |
| 7605 _webroot="$wvalue" | |
| 7606 else | |
| 7607 _webroot="$_webroot,$wvalue" | |
| 7608 fi | |
| 7609 ;; | |
| 7610 --dnssleep) | |
| 7611 _dnssleep="$2" | |
| 7612 Le_DNSSleep="$_dnssleep" | |
| 7613 shift | |
| 7614 ;; | |
| 7615 --keylength | -k) | |
| 7616 _keylength="$2" | |
| 7617 shift | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7618 if [ "$_keylength" ] && ! _isEccKey "$_keylength"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7619 export __SELECTED_RSA_KEY=1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7620 fi |
| 1630 | 7621 ;; |
| 7622 -ak | --accountkeylength) | |
| 7623 _accountkeylength="$2" | |
| 7624 shift | |
| 7625 ;; | |
| 7626 --cert-file | --certpath) | |
| 7627 _cert_file="$2" | |
| 7628 shift | |
| 7629 ;; | |
| 7630 --key-file | --keypath) | |
| 7631 _key_file="$2" | |
| 7632 shift | |
| 7633 ;; | |
| 7634 --ca-file | --capath) | |
| 7635 _ca_file="$2" | |
| 7636 shift | |
| 7637 ;; | |
| 7638 --fullchain-file | --fullchainpath) | |
| 7639 _fullchain_file="$2" | |
| 7640 shift | |
| 7641 ;; | |
| 7642 --reloadcmd | --reloadCmd) | |
| 7643 _reloadcmd="$2" | |
| 7644 shift | |
| 7645 ;; | |
| 7646 --password) | |
| 7647 _password="$2" | |
| 7648 shift | |
| 7649 ;; | |
| 7650 --accountconf) | |
| 7651 _accountconf="$2" | |
| 7652 ACCOUNT_CONF_PATH="$_accountconf" | |
| 7653 shift | |
| 7654 ;; | |
| 7655 --home) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7656 export LE_WORKING_DIR="$(echo "$2" | sed 's|/$||')" |
| 1630 | 7657 shift |
| 7658 ;; | |
| 7659 --cert-home | --certhome) | |
| 7660 _certhome="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7661 export CERT_HOME="$_certhome" |
| 1630 | 7662 shift |
| 7663 ;; | |
| 7664 --config-home) | |
| 7665 _confighome="$2" | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7666 export LE_CONFIG_HOME="$_confighome" |
| 1630 | 7667 shift |
| 7668 ;; | |
| 7669 --useragent) | |
| 7670 _useragent="$2" | |
| 7671 USER_AGENT="$_useragent" | |
| 7672 shift | |
| 7673 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7674 -m | --email | --accountemail) |
| 1630 | 7675 _accountemail="$2" |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7676 export ACCOUNT_EMAIL="$_accountemail" |
| 1630 | 7677 shift |
| 7678 ;; | |
| 7679 --accountkey) | |
| 7680 _accountkey="$2" | |
| 7681 ACCOUNT_KEY_PATH="$_accountkey" | |
| 7682 shift | |
| 7683 ;; | |
| 7684 --days) | |
| 7685 _days="$2" | |
| 7686 Le_RenewalDays="$_days" | |
| 7687 shift | |
| 7688 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7689 --valid-from) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7690 _valid_from="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7691 shift |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7692 ;; |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7693 --valid-to) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7694 _valid_to="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7695 shift |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7696 ;; |
| 1630 | 7697 --httpport) |
| 7698 _httpport="$2" | |
| 7699 Le_HTTPPort="$_httpport" | |
| 7700 shift | |
| 7701 ;; | |
| 7702 --tlsport) | |
| 7703 _tlsport="$2" | |
| 7704 Le_TLSPort="$_tlsport" | |
| 7705 shift | |
| 7706 ;; | |
| 7707 --listraw) | |
| 7708 _listraw="raw" | |
| 7709 ;; | |
| 7710 -se | --stop-renew-on-error | --stopRenewOnError | --stoprenewonerror) | |
| 7711 _stopRenewOnError="1" | |
| 7712 ;; | |
| 7713 --insecure) | |
| 7714 #_insecure="1" | |
| 7715 HTTPS_INSECURE="1" | |
| 7716 ;; | |
| 7717 --ca-bundle) | |
| 7718 _ca_bundle="$(_readlink "$2")" | |
| 7719 CA_BUNDLE="$_ca_bundle" | |
| 7720 shift | |
| 7721 ;; | |
| 7722 --ca-path) | |
| 7723 _ca_path="$2" | |
| 7724 CA_PATH="$_ca_path" | |
| 7725 shift | |
| 7726 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7727 --no-cron | --nocron) |
| 1630 | 7728 _nocron="1" |
| 7729 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7730 --no-profile | --noprofile) |
| 1630 | 7731 _noprofile="1" |
| 7732 ;; | |
| 7733 --no-color) | |
| 7734 export ACME_NO_COLOR=1 | |
| 7735 ;; | |
| 7736 --force-color) | |
| 7737 export ACME_FORCE_COLOR=1 | |
| 7738 ;; | |
| 7739 --ecc) | |
| 7740 _ecc="isEcc" | |
| 7741 ;; | |
| 7742 --csr) | |
| 7743 _csr="$2" | |
| 7744 shift | |
| 7745 ;; | |
| 7746 --pre-hook) | |
| 7747 _pre_hook="$2" | |
| 7748 shift | |
| 7749 ;; | |
| 7750 --post-hook) | |
| 7751 _post_hook="$2" | |
| 7752 shift | |
| 7753 ;; | |
| 7754 --renew-hook) | |
| 7755 _renew_hook="$2" | |
| 7756 shift | |
| 7757 ;; | |
| 7758 --deploy-hook) | |
| 7759 if [ -z "$2" ] || _startswith "$2" "-"; then | |
| 7760 _usage "Please specify a value for '--deploy-hook'" | |
| 7761 return 1 | |
| 7762 fi | |
| 7763 _deploy_hook="$_deploy_hook$2," | |
| 7764 shift | |
| 7765 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7766 --extended-key-usage) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7767 Le_ExtKeyUse="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7768 shift |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7769 ;; |
| 1630 | 7770 --ocsp-must-staple | --ocsp) |
| 7771 Le_OCSP_Staple="1" | |
| 7772 ;; | |
| 7773 --always-force-new-domain-key) | |
| 7774 if [ -z "$2" ] || _startswith "$2" "-"; then | |
| 7775 Le_ForceNewDomainKey=1 | |
| 7776 else | |
| 7777 Le_ForceNewDomainKey="$2" | |
| 7778 shift | |
| 7779 fi | |
| 7780 ;; | |
| 7781 --yes-I-know-dns-manual-mode-enough-go-ahead-please) | |
| 7782 export FORCE_DNS_MANUAL=1 | |
| 7783 ;; | |
| 7784 --log | --logfile) | |
| 7785 _log="1" | |
| 7786 _logfile="$2" | |
| 7787 if _startswith "$_logfile" '-'; then | |
| 7788 _logfile="" | |
| 7789 else | |
| 7790 shift | |
| 7791 fi | |
| 7792 LOG_FILE="$_logfile" | |
| 7793 if [ -z "$LOG_LEVEL" ]; then | |
| 7794 LOG_LEVEL="$DEFAULT_LOG_LEVEL" | |
| 7795 fi | |
| 7796 ;; | |
| 7797 --log-level) | |
| 7798 _log_level="$2" | |
| 7799 LOG_LEVEL="$_log_level" | |
| 7800 shift | |
| 7801 ;; | |
| 7802 --syslog) | |
| 7803 if ! _startswith "$2" '-'; then | |
| 7804 _syslog="$2" | |
| 7805 shift | |
| 7806 fi | |
| 7807 if [ -z "$_syslog" ]; then | |
| 7808 _syslog="$SYSLOG_LEVEL_DEFAULT" | |
| 7809 fi | |
| 7810 ;; | |
| 7811 --auto-upgrade) | |
| 7812 _auto_upgrade="$2" | |
| 7813 if [ -z "$_auto_upgrade" ] || _startswith "$_auto_upgrade" '-'; then | |
| 7814 _auto_upgrade="1" | |
| 7815 else | |
| 7816 shift | |
| 7817 fi | |
| 7818 AUTO_UPGRADE="$_auto_upgrade" | |
| 7819 ;; | |
| 7820 --listen-v4) | |
| 7821 _listen_v4="1" | |
| 7822 Le_Listen_V4="$_listen_v4" | |
| 7823 ;; | |
| 7824 --listen-v6) | |
| 7825 _listen_v6="1" | |
| 7826 Le_Listen_V6="$_listen_v6" | |
| 7827 ;; | |
| 7828 --openssl-bin) | |
| 7829 _openssl_bin="$2" | |
| 7830 ACME_OPENSSL_BIN="$_openssl_bin" | |
| 7831 shift | |
| 7832 ;; | |
| 7833 --use-wget) | |
| 7834 _use_wget="1" | |
| 7835 ACME_USE_WGET="1" | |
| 7836 ;; | |
| 7837 --branch | -b) | |
| 7838 export BRANCH="$2" | |
| 7839 shift | |
| 7840 ;; | |
| 7841 --notify-hook) | |
| 7842 _nhook="$2" | |
| 7843 if _startswith "$_nhook" "-"; then | |
| 7844 _err "'$_nhook' is not a hook name for '$1'" | |
| 7845 return 1 | |
| 7846 fi | |
| 7847 if [ "$_notify_hook" ]; then | |
| 7848 _notify_hook="$_notify_hook,$_nhook" | |
| 7849 else | |
| 7850 _notify_hook="$_nhook" | |
| 7851 fi | |
| 7852 shift | |
| 7853 ;; | |
| 7854 --notify-level) | |
| 7855 _nlevel="$2" | |
| 7856 if _startswith "$_nlevel" "-"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7857 _err "'$_nlevel' is not an integer for '$1'" |
| 1630 | 7858 return 1 |
| 7859 fi | |
| 7860 _notify_level="$_nlevel" | |
| 7861 shift | |
| 7862 ;; | |
| 7863 --notify-mode) | |
| 7864 _nmode="$2" | |
| 7865 if _startswith "$_nmode" "-"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7866 _err "'$_nmode' is not an integer for '$1'" |
| 1630 | 7867 return 1 |
| 7868 fi | |
| 7869 _notify_mode="$_nmode" | |
| 7870 shift | |
| 7871 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7872 --notify-source) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7873 _nsource="$2" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7874 if _startswith "$_nsource" "-"; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7875 _err "'$_nsource' is not a valid host name for '$1'" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7876 return 1 |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7877 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7878 _notify_source="$_nsource" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7879 shift |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7880 ;; |
| 1630 | 7881 --revoke-reason) |
| 7882 _revoke_reason="$2" | |
| 7883 if _startswith "$_revoke_reason" "-"; then | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7884 _err "'$_revoke_reason' is not an integer for '$1'" |
| 1630 | 7885 return 1 |
| 7886 fi | |
| 7887 shift | |
| 7888 ;; | |
| 7889 --eab-kid) | |
| 7890 _eab_kid="$2" | |
| 7891 shift | |
| 7892 ;; | |
| 7893 --eab-hmac-key) | |
| 7894 _eab_hmac_key="$2" | |
| 7895 shift | |
| 7896 ;; | |
| 7897 --preferred-chain) | |
| 7898 _preferred_chain="$2" | |
| 7899 shift | |
| 7900 ;; | |
| 7901 *) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7902 _err "Unknown parameter: $1" |
| 1630 | 7903 return 1 |
| 7904 ;; | |
| 7905 esac | |
| 7906 | |
| 7907 shift 1 | |
| 7908 done | |
| 7909 | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7910 if [ "$_server" ]; then |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7911 _selectServer "$_server" "${_ecc:-$_keylength}" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7912 _server="$ACME_DIRECTORY" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7913 fi |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7914 |
| 1630 | 7915 if [ "${_CMD}" != "install" ]; then |
| 7916 if [ "$__INTERACTIVE" ] && ! _checkSudo; then | |
| 7917 if [ -z "$FORCE" ]; then | |
| 7918 #Use "echo" here, instead of _info. it's too early | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7919 echo "It seems that you are using sudo, please read this page first:" |
| 1630 | 7920 echo "$_SUDO_WIKI" |
| 7921 return 1 | |
| 7922 fi | |
| 7923 fi | |
| 7924 __initHome | |
| 7925 if [ "$_log" ]; then | |
| 7926 if [ -z "$_logfile" ]; then | |
| 7927 _logfile="$DEFAULT_LOG_FILE" | |
| 7928 fi | |
| 7929 fi | |
| 7930 if [ "$_logfile" ]; then | |
| 7931 _saveaccountconf "LOG_FILE" "$_logfile" | |
| 7932 LOG_FILE="$_logfile" | |
| 7933 fi | |
| 7934 | |
| 7935 if [ "$_log_level" ]; then | |
| 7936 _saveaccountconf "LOG_LEVEL" "$_log_level" | |
| 7937 LOG_LEVEL="$_log_level" | |
| 7938 fi | |
| 7939 | |
| 7940 if [ "$_syslog" ]; then | |
| 7941 if _exists logger; then | |
| 7942 if [ "$_syslog" = "0" ]; then | |
| 7943 _clearaccountconf "SYS_LOG" | |
| 7944 else | |
| 7945 _saveaccountconf "SYS_LOG" "$_syslog" | |
| 7946 fi | |
| 7947 SYS_LOG="$_syslog" | |
| 7948 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7949 _err "The 'logger' command was not found, cannot enable syslog." |
| 1630 | 7950 _clearaccountconf "SYS_LOG" |
| 7951 SYS_LOG="" | |
| 7952 fi | |
| 7953 fi | |
| 7954 | |
| 7955 _processAccountConf | |
| 7956 fi | |
| 7957 | |
| 7958 _debug2 LE_WORKING_DIR "$LE_WORKING_DIR" | |
| 7959 | |
| 7960 if [ "$DEBUG" ]; then | |
| 7961 version | |
| 7962 if [ "$_server" ]; then | |
| 7963 _debug "Using server: $_server" | |
| 7964 fi | |
| 7965 fi | |
| 7966 _debug "Running cmd: ${_CMD}" | |
| 7967 case "${_CMD}" in | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7968 install) install "$_nocron" "$_confighome" "$_noprofile" "$_accountemail" ;; |
| 1630 | 7969 uninstall) uninstall "$_nocron" ;; |
| 7970 upgrade) upgrade ;; | |
| 7971 issue) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7972 issue "$_webroot" "$_domain" "$_altdomains" "$_keylength" "$_cert_file" "$_key_file" "$_ca_file" "$_reloadcmd" "$_fullchain_file" "$_pre_hook" "$_post_hook" "$_renew_hook" "$_local_address" "$_challenge_alias" "$_preferred_chain" "$_valid_from" "$_valid_to" |
| 1630 | 7973 ;; |
| 7974 deploy) | |
| 7975 deploy "$_domain" "$_deploy_hook" "$_ecc" | |
| 7976 ;; | |
| 7977 signcsr) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7978 signcsr "$_csr" "$_webroot" "$_cert_file" "$_key_file" "$_ca_file" "$_reloadcmd" "$_fullchain_file" "$_pre_hook" "$_post_hook" "$_renew_hook" "$_local_address" "$_challenge_alias" "$_preferred_chain" |
| 1630 | 7979 ;; |
| 7980 showcsr) | |
| 7981 showcsr "$_csr" "$_domain" | |
| 7982 ;; | |
| 7983 installcert) | |
| 7984 installcert "$_domain" "$_cert_file" "$_key_file" "$_ca_file" "$_reloadcmd" "$_fullchain_file" "$_ecc" | |
| 7985 ;; | |
| 7986 renew) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7987 renew "$_domain" "$_ecc" "$_server" |
| 1630 | 7988 ;; |
| 7989 renewAll) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
7990 renewAll "$_stopRenewOnError" "$_server" |
| 1630 | 7991 ;; |
| 7992 revoke) | |
| 7993 revoke "$_domain" "$_ecc" "$_revoke_reason" | |
| 7994 ;; | |
| 7995 remove) | |
| 7996 remove "$_domain" "$_ecc" | |
| 7997 ;; | |
| 7998 deactivate) | |
| 7999 deactivate "$_domain,$_altdomains" | |
| 8000 ;; | |
| 8001 registeraccount) | |
| 8002 registeraccount "$_accountkeylength" "$_eab_kid" "$_eab_hmac_key" | |
| 8003 ;; | |
| 8004 updateaccount) | |
| 8005 updateaccount | |
| 8006 ;; | |
| 8007 deactivateaccount) | |
| 8008 deactivateaccount | |
| 8009 ;; | |
| 8010 list) | |
| 8011 list "$_listraw" "$_domain" | |
| 8012 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8013 info) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8014 info "$_domain" "$_ecc" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8015 ;; |
| 1630 | 8016 installcronjob) installcronjob "$_confighome" ;; |
| 8017 uninstallcronjob) uninstallcronjob ;; | |
| 8018 cron) cron ;; | |
| 8019 toPkcs) | |
| 8020 toPkcs "$_domain" "$_password" "$_ecc" | |
| 8021 ;; | |
| 8022 toPkcs8) | |
| 8023 toPkcs8 "$_domain" "$_ecc" | |
| 8024 ;; | |
| 8025 createAccountKey) | |
| 8026 createAccountKey "$_accountkeylength" | |
| 8027 ;; | |
| 8028 createDomainKey) | |
| 8029 createDomainKey "$_domain" "$_keylength" | |
| 8030 ;; | |
| 8031 createCSR) | |
| 8032 createCSR "$_domain" "$_altdomains" "$_ecc" | |
| 8033 ;; | |
| 8034 setnotify) | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8035 setnotify "$_notify_hook" "$_notify_level" "$_notify_mode" "$_notify_source" |
| 1630 | 8036 ;; |
| 8037 setdefaultca) | |
| 8038 setdefaultca | |
| 8039 ;; | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8040 setdefaultchain) |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8041 setdefaultchain "$_preferred_chain" |
|
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8042 ;; |
| 1630 | 8043 *) |
| 8044 if [ "$_CMD" ]; then | |
| 8045 _err "Invalid command: $_CMD" | |
| 8046 fi | |
| 8047 showhelp | |
| 8048 return 1 | |
| 8049 ;; | |
| 8050 esac | |
| 8051 _ret="$?" | |
| 8052 if [ "$_ret" != "0" ]; then | |
| 8053 return $_ret | |
| 8054 fi | |
| 8055 | |
| 8056 if [ "${_CMD}" = "install" ]; then | |
| 8057 if [ "$_log" ]; then | |
| 8058 if [ -z "$LOG_FILE" ]; then | |
| 8059 LOG_FILE="$DEFAULT_LOG_FILE" | |
| 8060 fi | |
| 8061 _saveaccountconf "LOG_FILE" "$LOG_FILE" | |
| 8062 fi | |
| 8063 | |
| 8064 if [ "$_log_level" ]; then | |
| 8065 _saveaccountconf "LOG_LEVEL" "$_log_level" | |
| 8066 fi | |
| 8067 | |
| 8068 if [ "$_syslog" ]; then | |
| 8069 if _exists logger; then | |
| 8070 if [ "$_syslog" = "0" ]; then | |
| 8071 _clearaccountconf "SYS_LOG" | |
| 8072 else | |
| 8073 _saveaccountconf "SYS_LOG" "$_syslog" | |
| 8074 fi | |
| 8075 else | |
|
2015
61b0cc7db09c
Manually specify letsencrypt server due to acme default server change (to zerossl)
Violet7
parents:
1630
diff
changeset
|
8076 _err "The 'logger' command was not found, cannot enable syslog." |
| 1630 | 8077 _clearaccountconf "SYS_LOG" |
| 8078 SYS_LOG="" | |
| 8079 fi | |
| 8080 fi | |
| 8081 | |
| 8082 _processAccountConf | |
| 8083 fi | |
| 8084 | |
| 8085 } | |
| 8086 | |
| 8087 main() { | |
| 8088 [ -z "$1" ] && showhelp && return | |
| 8089 if _startswith "$1" '-'; then _process "$@"; else "$@"; fi | |
| 8090 } | |
| 8091 | |
| 8092 main "$@" |