mtrossevin/ansible-roles
1
0
Fork 0
forked from evolix/ansible-roles
Code Issues Pull requests Releases Wiki Activity

certbot: detect domains for SAN certificates

Browse source
This commit is contained in:
Jérémy Lecour 2021-10-14 17:38:42 +02:00 • committed by Jérémy Lecour
parent 6a4b250b5d
commit 33cb1dd8ef
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
certbot/files/hooks/deploy/sync_remote.sh
View file

@ -14,8 +14,15 @@ debug() {
found_renewed_lineage() {
test -f "${RENEWED_LINEAGE}/fullchain.pem" && test -f "${RENEWED_LINEAGE}/privkey.pem"
}
cert_content() {
openssl x509 -text -in "${RENEWED_LINEAGE}/fullchain.pem"
}
domain_from_cert() {
openssl x509 -noout -subject -in "${RENEWED_LINEAGE}/fullchain.pem" | sed 's/^.*CN\ *=\ *//'
if cert_content | grep -q "X509v3 Subject Alternative Name:" && cert_content | grep -q "DNS:"; then
cert_content | grep "DNS:" | sed -e 's/\s\+//g' -e 's/DNS://g'
else
cert_content | sed 's/^.*CN\ *=\ *//'
fi
}
main() {
if [ -z "${RENEWED_LINEAGE}" ]; then