mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-03-20 00:03:50 +01:00
Add hook for unchanged certificates.
This commit is contained in:
@@ -52,4 +52,24 @@ function deploy_cert {
|
||||
# The path of the file containing the intermediate certificate(s).
|
||||
}
|
||||
|
||||
function unchanged_cert {
|
||||
local DOMAIN="${1}" KEYFILE="${2}" CERTFILE="${3}" FULLCHAINFILE="${4}" CHAINFILE="${5}"
|
||||
|
||||
# This hook is called once for each certificate that is still
|
||||
# valid and therefore wasn't reissued.
|
||||
#
|
||||
# Parameters:
|
||||
# - DOMAIN
|
||||
# The primary domain name, i.e. the certificate common
|
||||
# name (CN).
|
||||
# - KEYFILE
|
||||
# The path of the file containing the private key.
|
||||
# - CERTFILE
|
||||
# The path of the file containing the signed certificate.
|
||||
# - FULLCHAINFILE
|
||||
# The path of the file containing the full certificate chain.
|
||||
# - CHAINFILE
|
||||
# The path of the file containing the intermediate certificate(s).
|
||||
}
|
||||
|
||||
HANDLER=$1; shift; $HANDLER $@
|
||||
|
||||
@@ -598,7 +598,9 @@ command_sign_domains() {
|
||||
if [[ "${force_renew}" = "yes" ]]; then
|
||||
echo "Ignoring because renew was forced!"
|
||||
else
|
||||
echo "Skipping!"
|
||||
# Certificate-Names unchanged and cert is still valid
|
||||
echo "Skipping renew! Calling unchanged-hook."
|
||||
[[ -n "${HOOK}" ]] && "${HOOK}" "unchanged_cert" "${domain}" "${BASEDIR}/certs/${domain}/privkey.pem" "${BASEDIR}/certs/${domain}/cert.pem" "${BASEDIR}/certs/${domain}/fullchain.pem" "${BASEDIR}/certs/${domain}/chain.pem"
|
||||
continue
|
||||
fi
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user