starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-04-25 09:48:29 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

make openssl keysize configurable

Browse Source
This commit is contained in:
Markus Germeier
2015-12-06 12:14:51 +01:00
committed by Lukas Schauer
parent 96d7eabed4
commit 5a213f5f6a
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
config.sh.example
View File

@@ -2,6 +2,7 @@
#CA="https://acme-v01.api.letsencrypt.org" #CA="https://acme-v01.api.letsencrypt.org"
WELLKNOWN="/var/www/letsencrypt/.well-known/acme-challenge" WELLKNOWN="/var/www/letsencrypt/.well-known/acme-challenge"
#KEYSIZE=4096
# program called before responding to the challenge, arguments: path/to/token # program called before responding to the challenge, arguments: path/to/token
# token; can be used to e.g. upload the challenge if this script doesn't run # token; can be used to e.g. upload the challenge if this script doesn't run

7
letsencrypt.sh
View File

@@ -8,6 +8,7 @@ set -o pipefail
CA="https://acme-v01.api.letsencrypt.org" CA="https://acme-v01.api.letsencrypt.org"
LICENSE="https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf" LICENSE="https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf"
HOOK_CHALLENGE= HOOK_CHALLENGE=
KEYSIZE="4096"
. ./config.sh . ./config.sh
@@ -96,7 +97,7 @@ sign_domain() {
if [[ ! -e "certs/${domain}" ]]; then if [[ ! -e "certs/${domain}" ]]; then
mkdir -p "certs/${domain}" mkdir -p "certs/${domain}"
echo " + Generating private key..." echo " + Generating private key..."
openssl genrsa -out "certs/${domain}/privkey.pem" 4096 2> /dev/null > /dev/null openssl genrsa -out "certs/${domain}/privkey.pem" "${KEYSIZE}" 2> /dev/null > /dev/null
fi fi
# Generate signing request config and the actual signing request # Generate signing request config and the actual signing request
@@ -160,11 +161,11 @@ sign_domain() {
echo " + Done!" echo " + Done!"
} }
# Check if private key exists, if it doesn't exist yet generate a new one (4096bit rsa key) # Check if private key exists, if it doesn't exist yet generate a new one (rsa key)
register="0" register="0"
if [[ ! -e "private_key.pem" ]]; then if [[ ! -e "private_key.pem" ]]; then
echo "+ Generating account key..." echo "+ Generating account key..."
openssl genrsa -out "private_key.pem" 4096 2> /dev/null > /dev/null openssl genrsa -out "private_key.pem" "${KEYSIZE}" 2> /dev/null > /dev/null
register="1" register="1"
fi fi