|
@@ -55,6 +55,36 @@ fi
|
55
|
55
|
}
|
56
|
56
|
|
57
|
57
|
|
|
58
|
+function toSSL() {
|
|
59
|
+for ((dmn=0; dmn != ${#domains[@]}; dmn++))
|
|
60
|
+ do
|
|
61
|
+ eval local dreg="(" $(echo -e ${domains[$dmn]}) ")";
|
|
62
|
+ ((valtrue++));
|
|
63
|
+ cat $path_cert/${dreg[0]}/cert.pem > $path_ssl/private/${dreg[0]}.pem;
|
|
64
|
+ cat $path_cert/${dreg[0]}/chain.pem >> $path_ssl/private/${dreg[0]}.pem;
|
|
65
|
+ cat $path_cert/${dreg[0]}/fullchain.pem >> $path_ssl/private/${dreg[0]}.pem;
|
|
66
|
+ cat $path_cert/${dreg[0]}/privkey.pem >> $path_ssl/private/${dreg[0]}.pem;
|
|
67
|
+#
|
|
68
|
+ cp -f $path_ssl/private/${dreg[0]}.pem $path_ssl/certs/${dreg[0]}.pem
|
|
69
|
+ cd $path_ssl/certs
|
|
70
|
+ chmod 600 ${dreg[0]}.pem
|
|
71
|
+ ln -sf ${dreg[0]}.pem `openssl x509 -noout -hash < ${dreg[0]}.pem`.0
|
|
72
|
+ cd $path_ssl
|
|
73
|
+ echo "$(date) - auto4certbot.sh: update certlist for ${domains[$dmn]}">> $log;
|
|
74
|
+done
|
|
75
|
+if [ $valtrue != 0 ];
|
|
76
|
+ then
|
|
77
|
+ :>/etc/ssl/crt-list.txt
|
|
78
|
+ for ((icrt=0; icrt != ${#domains[@]}; icrt++))
|
|
79
|
+ do
|
|
80
|
+ echo "$path_ssl/${domains[$icrt]}.pem">>/etc/ssl/crt-list.txt
|
|
81
|
+ done
|
|
82
|
+fi
|
|
83
|
+}
|
|
84
|
+
|
|
85
|
+
|
|
86
|
+
|
|
87
|
+
|
58
|
88
|
case "$cmd" in
|
59
|
89
|
|
60
|
90
|
## create cert
|
|
@@ -67,11 +97,18 @@ createCert;
|
67
|
97
|
renew;
|
68
|
98
|
;;
|
69
|
99
|
|
|
100
|
+## update cert force
|
|
101
|
+"--flist" | "--flist" )
|
|
102
|
+toSSL;
|
|
103
|
+;;
|
|
104
|
+
|
70
|
105
|
## start defaults
|
71
|
106
|
|
72
|
107
|
* )
|
73
|
|
-echo "please input pameters: auto4certbot.sh --create | --update";
|
|
108
|
+echo "please input pameters: auto4certbot.sh --create | --update | --flist";
|
74
|
109
|
echo "auto4certbot.sh --create; create new certificate"
|
75
|
110
|
echo "auto4certbot.sh --update; update certificates;"
|
|
111
|
+echo "auto4certbot.sh --flist; update certificates from ssl;"
|
|
112
|
+
|
76
|
113
|
;;
|
77
|
|
-esac
|
|
114
|
+esac
|