diff --git a/renew_cert.sh b/renew_cert.sh index c31b518..d10adee 100755 --- a/renew_cert.sh +++ b/renew_cert.sh @@ -1,29 +1,36 @@ #!/bin/sh -base_dir="/etc/ssl/nginx" -_EUID="$(id -u)" +PATH="$PATH:/sbin" + +service=$1 +fqdn=$2 die() { echo "$@" >&2 exit 1 } +if [ -z "${service}" ] || [ -z ${fqdn} ]; then + die "service and fqdn have to be set" +fi -openssl x509 -checkend 2678400 -noout -in $base_dir/$1.crt +base_dir="/etc/ssl/${service}" + +openssl x509 -checkend 2678400 -noout -in $base_dir/${fqdn}.crt if [ $? = 0 ]; then - exit 1 + exit 0 else - mv $base_dir/$1.crt $base_dir/$1.crt.bak-$(date +%F) - mv $base_dir/$1.chained.crt \ - $base_dir/$1.chained.crt-$(date +%F) + mv $base_dir/${fqdn}.crt $base_dir/${fqdn}.crt.bak-$(date +%F) + mv $base_dir/${fqdn}-chained.crt \ + $base_dir/${fqdn}-chained.crt-$(date +%F) certbot certonly \ - --csr $base_dir/$1.csr \ - --cert-path $base_dir/$1.crt \ - --chain-path $base_dir/$1.chained.crt \ + --csr $base_dir/${fqdn}.csr \ + --cert-path $base_dir/${fqdn}.crt \ + --chain-path $base_dir/${fqdn}-chained.crt \ --webroot \ - -w /usr/local/www/le-challenges/ \ + -w /var/www/le-challenges/ \ --agree-tos \ --register-unsafely-without-email || die "Error while signing certificate" - mv 0000_chain.pem $base_dir/$1-chained.crt - sudo service nginx reload + mv 0000_chain.pem $base_dir/${fqdn}-chained.crt + rc-service ${service} reload fi