#!/bin/sh

email=$EMAIL

sending_error_msg() {

	echo "there was unsucessfuly created "$DOMAIN" at date: "$DATE;
}

start_letsencrypt() {

	mkdir -p /acme.sh/$DOMAIN/ ;

	/usr/local/bin/acme.sh -m $email --issue --standalone --keylength 4096 -d  $DOMAIN --cert-file /acme.sh/$DOMAIN/cert.pem --key-file /acme.sh/$DOMAIN/key.pem --fullchain-file /acme.sh/$DOMAIN/fullchain.pem
	
	# Check certificate issuer
	ISSUER=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -text -noout |grep -w CN |grep Issuer |  cut -d '=' -f2);
	SUBJECT=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -text -noout |grep -w CN |grep Subject | cut -d '=' -f2);
	if [ "$ISSUER" == "$SUBJECT" ]; then
		echo "Self signed certificate found";
		/usr/local/bin/acme.sh -m $email --force --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /acme.sh/$DOMAIN/cert.pem --key-file /acme.sh/$DOMAIN/key.pem --fullchain-file /acme.sh/$DOMAIN/fullchain.pem
	fi
}

check_new_cert() {

	#DATE=$(date +%s)
	if [[ -f /acme.sh/$DOMAIN/key.pem && -f /acme.sh/$DOMAIN/fullchain.pem && -f /acme.sh/$DOMAIN/cert.pem ]] ; then
		#D1=$(date -r /acme.sh/$DOMAIN/fullchain.pem +%s)
		#DIFF=$(expr $DATE - $D1);
		#if [ $DIFF < 3600 ]; then touch /acme.sh/$DOMAIN/new_certificate; fi
		NEW=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -fingerprint -noout)
		if [ "$ORIGINAL" !=  "$NEW" ]; then
			touch /acme.sh/$DOMAIN/new_certificate;
		fi
	else
		sending_error_msg $DOMAIN $DATE;
	fi
}

LETSENCRYPT_FILE=$(find /acme.sh/ -type f -name letsencrypt);
if [ -n "$LETSENCRYPT_FILE" ] ; then
	DOMAIN=$(jq -r .DOMAIN $LETSENCRYPT_FILE) ;
	ORIGINAL=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -fingerprint -noout)
	start_letsencrypt;
	rm $LETSENCRYPT_FILE;

	check_new_cert
else 
	cd /domains
	for i in `ls` ; do
		DOMAIN=$(jq -r .DOMAIN $i) ;
		ORIGINAL=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -fingerprint -noout)
		start_letsencrypt $DOMAIN;

		check_new_cert
	done ;
fi