starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-04-22 08:18:27 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

implement revoke

Browse Source
This commit is contained in:
Markus Germeier
2015-12-07 19:51:54 +01:00
committed by Lukas Schauer
parent 0d7913ab61
commit 063d28a6dc
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
letsencrypt.sh
View File

@@ -107,6 +107,17 @@ signed_request() {
_request post "${1}" "${data}" _request post "${1}" "${data}"
} }
revoke_cert() {
cert="${1}"
cert64="$(openssl x509 -in "${cert}" -inform PEM -outform DER | urlbase64)"
response="$(signed_request "${CA}/acme/revoke-cert" '{"resource": "revoke-cert", "certificate": "'"${cert64}"'"}')"
# if there is a problem with our revoke request _request (via signed_request) will report this and "exit 1" out
# so if we are here, it is safe to assume the request was successful
echo " + SUCCESS"
echo " + renaming certificate to ${cert}-revoked"
mv -f "${cert}" "${cert}-revoked"
}
sign_domain() { sign_domain() {
domain="${1}" domain="${1}"
altnames="${*}" altnames="${*}"
@@ -255,6 +266,19 @@ if [[ ! -e "${WELLKNOWN}" ]]; then
mkdir -p "${WELLKNOWN}" mkdir -p "${WELLKNOWN}"
fi fi
# revoke certificate by user request
if [[ "${1:-}" = "revoke" ]]; then
if [[ -z "{2:-}" ]] || [[ ! -f "${2}" ]]; then
echo usage: ${0} revoke path/to/cert.pem
exit 1
fi
echo "Revoking ${2}"
revoke_cert "${2}"
exit 0
fi
# Generate certificates for all domains found in domains.txt. Check if existing certificate are about to expire # Generate certificates for all domains found in domains.txt. Check if existing certificate are about to expire
<"${DOMAINS_TXT}" sed 's/^\s*//g;s/\s*$//g' | grep -v '^#' | grep -v '^$' | while read -r line; do <"${DOMAINS_TXT}" sed 's/^\s*//g;s/\s*$//g' | grep -v '^#' | grep -v '^$' | while read -r line; do
domain="$(echo "${line}" | cut -d' ' -f1)" domain="$(echo "${line}" | cut -d' ' -f1)"