hoellen/dockerfiles
1
0
Fork 0
mirror of https://github.com/hoellen/dockerfiles.git synced 2025-04-20 04:19:18 +00:00
Code Issues Projects Releases Wiki Activity

reverse: fix renewal

Browse Source
This commit is contained in:
Wonderfall 2017-10-31 13:29:31 +01:00 committed by GitHub
parent e661a3fd5a
commit 4e9e165ed2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
reverse/rootfs/usr/local/bin/check_certs
View File

@ -37,13 +37,22 @@ f_check_certs() {
FULLCHAINFILE=/nginx/ssl/certificates/${domain}.crt FULLCHAINFILE=/nginx/ssl/certificates/${domain}.crt
SCTFILE=/nginx/ssl/timestamps/${domain}/fullchain.sct SCTFILE=/nginx/ssl/timestamps/${domain}/fullchain.sct
SSL_ALGO="$(openssl x509 -text -in ${FULLCHAINFILE} | grep "Public Key Algorithm" | awk '{print $4}')"
SSL_SIZE="$(openssl x509 -text -in ${FULLCHAINFILE} | grep "Public-Key" | sed 's/^.*(\(.*\) bit)$/\1/')"
if [ "${SSL_ALGO}" == "rsaEncryption" ]; then
SSL_TYPE="rsa${SSL_SIZE}"
elif [ "${SSL_ALGO}" == "id-ecPublicKey" ]; then
SSL_TYPE="ec${SSL_SIZE}"
fi
mkdir -p /nginx/www/${domain} mkdir -p /nginx/www/${domain}
openssl x509 -checkend 864000 -noout -in "${FULLCHAINFILE}" openssl x509 -checkend 864000 -noout -in "${FULLCHAINFILE}"
if [ $? == 0 ]; then if [ $? == 0 ]; then
f_log INF "Certificate for ${domain} is good for another 10 days!" f_log INF "Certificate for ${domain} is good for another 10 days!"
else else
f_log INF "Generate New Certificate for ${domain}" f_log INF "Generate New Certificate for ${domain}"
/usr/local/bin/lego -a -m ${EMAIL} -d ${domain} --path /nginx/ssl --webroot /nginx/www/${domain} renew /usr/local/bin/lego -a -m ${EMAIL} -d ${domain} --path /nginx/ssl --webroot /nginx/www/${domain} -k ${SSL_TYPE} renew
if [ $? == 0 ]; then if [ $? == 0 ]; then
if [ -e ${FULLCHAINFILE} ]; then if [ -e ${FULLCHAINFILE} ]; then
head -$(grep -n "END CERTIFICATE" ${FULLCHAINFILE} | head -1 | cut -d: -f1) ${FULLCHAINFILE} > ${CERTFILE} head -$(grep -n "END CERTIFICATE" ${FULLCHAINFILE} | head -1 | cut -d: -f1) ${FULLCHAINFILE} > ${CERTFILE}