From 51b6112e719e888ecd092cc30bd58bbdc65f7509 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Beno=C3=AEt=20S=C3=89RIE?= Date: Tue, 4 Jun 2019 16:33:07 +0200 Subject: [PATCH] Wrapper evoacme Used by Quai13. Will be redo properly by Nicolas ;) --- scripts/evoacme-wrapper.sh | 32 ++++++++++++++++++++++++++++++++ scripts/evoacme.sh | 13 +++++++++++++ 2 files changed, 45 insertions(+) create mode 100644 scripts/evoacme-wrapper.sh create mode 100644 scripts/evoacme.sh diff --git a/scripts/evoacme-wrapper.sh b/scripts/evoacme-wrapper.sh new file mode 100644 index 0000000..72d4eff --- /dev/null +++ b/scripts/evoacme-wrapper.sh @@ -0,0 +1,32 @@ +#!/bin/bash + +vhost=$1 +dryrun=${2:-no} + +echo "$0 $@ invocated at $(date -R)" >> /var/log/evoacme-wrapper.log + +if [[ -f /etc/letsencrypt/${vhost}/live/fullchain.pem ]]; then + echo "Le certificat est déjà en place ! Ouvrir un ticket si il faut ajouter un domaine au certificat." + openssl x509 -text -in /etc/letsencrypt/${vhost}/live/fullchain.pem | grep -e etc -e CN= -e DNS: -e After; + exit 1 +fi + +if [[ ! -f /etc/ssl/requests/${vhost}.csr ]]; then + source /usr/share/scripts/evoadmin/evoacme.sh $1 +fi + +if [[ "$dryrun" == "dry-run" ]]; then + export VERBOSE=1 + export DRY_RUN=1 + echo "Lancement en dry-run" + /usr/local/sbin/evoacme $vhost +else + export VERBOSE=1 + /usr/local/sbin/evoacme $vhost +fi + +grep -q "*:80>" /etc/apache2/sites-enabled/${vhost}.conf +if [ $? -eq 0 ] ; then + sed -i 's@@@' /etc/apache2/sites-enabled/${vhost}.conf + sed -i "s@@Include /etc/apache2/ssl/$vhost.conf\n@" /etc/apache2/sites-enabled/${vhost}.conf +fi diff --git a/scripts/evoacme.sh b/scripts/evoacme.sh new file mode 100644 index 0000000..7dc5a3d --- /dev/null +++ b/scripts/evoacme.sh @@ -0,0 +1,13 @@ +#!/bin/bash + +in_login="$1" + +domain=$(bash /usr/share/scripts/evoadmin/web-add.sh list-vhost $in_login | cut -d ':' -f3) +alias=$(bash /usr/share/scripts/evoadmin/web-add.sh list-vhost $in_login | cut -d ':' -f4 | tr ',' ' ') +echo $domain $alias | /usr/local/sbin/make-csr "$in_login" +if [[ ${PIPESTATUS[1]} != 0 ]]; then + echo "Erreur avec echo $domain $alias | /usr/local/sbin/make-csr $in_login" + return 1 +fi +return 0 +