certbot-dehydrated.sh 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. #!/bin/bash
  2. # script convert end make ssl sert for https
  3. # info - https://sysadmin.pm/dehydrated-letsencrypt/
  4. #
  5. path_ssl="/etc/ssl/private";
  6. path_certbot="/var/lib/dehydrated/certs";
  7. src="/etc/scripts/autocertbot/certbot.conf"
  8. function makeSslPem() {
  9. for ((dmn=0; dmn != ${#domains[@]}; dmn++))
  10. do
  11. cat $path_certbot/${domains[$dmn]}/cert.pem > $path_ssl/${domains[$dmn]}.pem;
  12. cat $path_certbot/${domains[$dmn]}/chain.pem >> $path_ssl/${domains[$dmn]}.pem;
  13. cat $path_certbot/${domains[$dmn]}/fullchain.pem >> $path_ssl/${domains[$dmn]}.pem;
  14. cat $path_certbot/${domains[$dmn]}/privkey.pem >> $path_ssl/${domains[$dmn]}.pem;
  15. done
  16. makePemList;
  17. }
  18. function makePemList() {
  19. :>/etc/ssl/crt-list.txt
  20. for ((icrt=0; icrt != ${#domains[@]}; icrt++))
  21. do
  22. echo "$path_ssl/${domains[$icrt]}.pem">>/etc/ssl/crt-list.txt
  23. done
  24. }
  25. function checkCert() {
  26. if [ $(dehydrated -c -4|grep 'Certificate will not expire'|wc -l) != 0 ];
  27. then
  28. echo "$(date +%c) certbot(dehydrated): no certificates to upgrade...">>$logfile;
  29. exit;
  30. else
  31. makeSslPem;
  32. /etc/init.d/haproxy restart;
  33. echo "$(date +%c) certbot(dehydrated): updating sertificate">>$logfile;
  34. fi
  35. }
  36. ## create sets.pem
  37. checkCert;