safebox/letsencrypt
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Refactor letsencrypt script for improved readability and consistency
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
gyurix
2025-03-08 11:37:41 +01:00
parent 815c154a28
commit e558ae96e8
1 changed files with 69 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
start.letsencrypt.sh
View File

@@ -8,8 +8,6 @@ LOG_FILE=$LOG_DIR/letsencrypt.txt
LETSENCRYPT_OUTPUT=$LOG_DIR/letsencrypt.json
DATE=$(date +"%Y-%m-%d-%H-%M")
echo "email $EMAIL"
echo "DOMAIN: $DOMAIN"
@@ -27,17 +25,17 @@ fi
TIMEOUT=$TIMEOUT
if [[ -z "$TIMEOUT" ]]; then
TIMEOUT=10;
TIMEOUT=10
fi
RESTART=$RESTART
if [[ -z "$RESTART" ]]; then
RESTART=5;
RESTART=5
fi
sending_error_msg() {
echo "there was unsucessfuly created "$DOMAIN" at date: "$DATE;
echo "there was unsucessfuly created "$DOMAIN" at date: "$DATE
}
create_json() {
@@ -55,22 +53,22 @@ start_letsencrypt() {
curl https://get.acme.sh | sh -s email=$EMAIL
cd /root/.acme.sh
chmod a+x ./acme.sh
RESPONSE=$(./acme.sh $L_S $EK $EHK --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /etc/ssl/keys/$DOMAIN/cert.pem --key-file /etc/ssl/keys/$DOMAIN/key.pem --fullchain-file /etc/ssl/keys/$DOMAIN/fullchain.pem > $LOG_FILE);
RESPONSE=$(./acme.sh $L_S $EK $EHK --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /etc/ssl/keys/$DOMAIN/cert.pem --key-file /etc/ssl/keys/$DOMAIN/key.pem --fullchain-file /etc/ssl/keys/$DOMAIN/fullchain.pem >$LOG_FILE)
if [[ "$(echo $?)" == "1" ]]; then
for retries in $(seq 0 $((RESTART + 1))); do
if [[ $retries -le $RESTART ]]; then
# Check certificate issuer
ISSUER=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -text -noout |grep -w CN |grep Issuer | cut -d '=' -f2);
SUBJECT=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -text -noout |grep -w CN |grep Subject | cut -d '=' -f2);
ISSUER=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -text -noout | grep -w CN | grep Issuer | cut -d '=' -f2)
SUBJECT=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -text -noout | grep -w CN | grep Subject | cut -d '=' -f2)
if [ "$ISSUER" == "$SUBJECT" ]; then
echo "Self signed certificate found";
RESPONSE=$(./acme.sh $L_S $EK $EHK --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /etc/ssl/keys/$DOMAIN/cert.pem --key-file /etc/ssl/keys/$DOMAIN/key.pem --fullchain-file /etc/ssl/keys/$DOMAIN/fullchain.pem >> $LOG_FILE);
echo "Self signed certificate found"
RESPONSE=$(./acme.sh $L_S $EK $EHK --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /etc/ssl/keys/$DOMAIN/cert.pem --key-file /etc/ssl/keys/$DOMAIN/key.pem --fullchain-file /etc/ssl/keys/$DOMAIN/fullchain.pem >>$LOG_FILE)
if [[ "$(echo $?)" != "1" ]]; then
sleep $TIMEOUT;
sleep $TIMEOUT
echo "Restarting number is only: "$retries" so try again"
fi
else
sleep $TIMEOUT;
sleep $TIMEOUT
echo "Restarting number is only: "$retries" so try again"
fi
else
@@ -97,35 +95,35 @@ check_new_cert() {
#if [ $DIFF < 3600 ]; then touch /etc/ssl/keys/$DOMAIN/new_certificate; fi
NEW=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -fingerprint -noout)
if [ "$ORIGINAL" != "$NEW" ]; then
touch /etc/ssl/keys/$DOMAIN/new_certificate;
touch /etc/ssl/keys/$DOMAIN/new_certificate
fi
else
sending_error_msg $DOMAIN $DATE;
sending_error_msg $DOMAIN $DATE
fi
}
LETSENCRYPT_FILE=$(find /etc/ssl/keys/ -type f -name letsencrypt);
LETSENCRYPT_FILE=$(find /etc/ssl/keys/ -type f -name letsencrypt)
if [ -n "$LETSENCRYPT_FILE" ] || [ "$DOMAIN" != "" ]; then
DOMAIN=$(jq -r .DOMAIN $LETSENCRYPT_FILE) ;
rm $LETSENCRYPT_FILE;
DOMAIN=$(jq -r .DOMAIN $LETSENCRYPT_FILE)
rm $LETSENCRYPT_FILE
ORIGINAL=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -fingerprint -noout)
if [ "$DOMAIN" != "localhost" ]; then
if [ ! -f $LETSENCRYPT_OUTPUT ] then
if [ ! -f $LETSENCRYPT_OUTPUT ]; then
install -m 664 -g 65534 /dev/null $LETSENCRYPT_OUTPUT
echo '[]' >$LETSENCRYPT_OUTPUT
fi
start_letsencrypt;
start_letsencrypt
check_new_cert
fi
else
cd /domains
for i in `ls` ; do
DOMAIN=$(jq -r .DOMAIN $i) ;
for i in $(ls); do
DOMAIN=$(jq -r .DOMAIN $i)
if [ "$DOMAIN" != "localhost" ]; then
ORIGINAL=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -fingerprint -noout)
start_letsencrypt $DOMAIN;
start_letsencrypt $DOMAIN
check_new_cert
fi
done ;
done
fi