uberspace/letsencrypt-renew
1
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Allow forcing cert renewing via opt

Browse Source 
Allow forcing renewing of certificates via cmdline opt to handle
changed domain lists
This commit is contained in:
golderweb
2019-11-05 10:28:49 +01:00
parent 2e42710925
commit cfa04d5da0
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
letsencrypt-renew.sh
+12 -3
View File
@@ -2,7 +2,7 @@
# #
# letsencrypt-renew.sh # letsencrypt-renew.sh
# #
# Copyright 2017 Jonathan Golder <jonathan@golderweb.de> # Copyright 2019 Jonathan Golder <jonathan@golderweb.de>
# #
# Derived from: # Derived from:
# https://wiki.uberspace.de/webserver:https#automatisieren_von_let_s_encrypt # https://wiki.uberspace.de/webserver:https#automatisieren_von_let_s_encrypt
@@ -63,6 +63,13 @@ import_certificate() {
fi fi
} }
while getopts f opt
do
case $opt in
f): force=1;;
esac
done
# Get all existing inifiles matching namescheme cli-${domain}.ini # Get all existing inifiles matching namescheme cli-${domain}.ini
for inifile in "${LECONFIGDIR}"/cli-*.ini; do for inifile in "${LECONFIGDIR}"/cli-*.ini; do
@@ -80,8 +87,10 @@ for inifile in "${LECONFIGDIR}"/cli-*.ini; do
sleep $(expr $RANDOM % 600) sleep $(expr $RANDOM % 600)
fi fi
# Check validity of cert for domain if [[ -z $force ]]; then
openssl x509 -checkend $(( 21 * 86400 )) -in "${LECONFIGDIR}/live/${domain}/cert.pem" > /dev/null && continue # Check validity of cert for domain
openssl x509 -checkend $(( 21 * 86400 )) -in "${LECONFIGDIR}/live/${domain}/cert.pem" > /dev/null && continue
fi
# run let's encrypt # run let's encrypt
FIRSTITER=0 FIRSTITER=0