This commit is contained in:
Alarig Le Lay 2023-10-29 12:07:49 +01:00
parent 9fda2b204f
commit e17d4c4a01

View file

@ -1,29 +1,36 @@
#!/bin/sh
base_dir="/etc/ssl/nginx"
_EUID="$(id -u)"
PATH="$PATH:/sbin"
service=$1
fqdn=$2
die() {
echo "$@" >&2
exit 1
}
if [ -z "${service}" ] || [ -z ${fqdn} ]; then
die "service and fqdn have to be set"
fi
openssl x509 -checkend 2678400 -noout -in $base_dir/$1.crt
base_dir="/etc/ssl/${service}"
openssl x509 -checkend 2678400 -noout -in $base_dir/${fqdn}.crt
if [ $? = 0 ]; then
exit 1
exit 0
else
mv $base_dir/$1.crt $base_dir/$1.crt.bak-$(date +%F)
mv $base_dir/$1.chained.crt \
$base_dir/$1.chained.crt-$(date +%F)
mv $base_dir/${fqdn}.crt $base_dir/${fqdn}.crt.bak-$(date +%F)
mv $base_dir/${fqdn}-chained.crt \
$base_dir/${fqdn}-chained.crt-$(date +%F)
certbot certonly \
--csr $base_dir/$1.csr \
--cert-path $base_dir/$1.crt \
--chain-path $base_dir/$1.chained.crt \
--csr $base_dir/${fqdn}.csr \
--cert-path $base_dir/${fqdn}.crt \
--chain-path $base_dir/${fqdn}-chained.crt \
--webroot \
-w /usr/local/www/le-challenges/ \
-w /var/www/le-challenges/ \
--agree-tos \
--register-unsafely-without-email || die "Error while signing certificate"
mv 0000_chain.pem $base_dir/$1-chained.crt
sudo service nginx reload
mv 0000_chain.pem $base_dir/${fqdn}-chained.crt
rc-service ${service} reload
fi