starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-04-24 09:18:28 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

generate private key if non-existant

Browse Source
This commit is contained in:
Lukas Schauer
2015-12-05 02:38:51 +01:00
parent 61f0b7ed7a
commit f13eaa7f41
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
letsencrypt.sh
View File

@@ -51,7 +51,7 @@ sign_domain() {
mkdir "certs/${domain}" mkdir "certs/${domain}"
echo " + Generating private key..." echo " + Generating private key..."
openssl genrsa -out "certs/${domain}/privkey.pem" 4096 > /dev/null openssl genrsa -out "certs/${domain}/privkey.pem" 4096 2> /dev/null > /dev/null
echo " + Generating signing request..." echo " + Generating signing request..."
openssl req -new -sha256 -key "certs/${domain}/privkey.pem" -out "certs/${domain}/cert.csr" -subj "/CN=${domain}/" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=${SAN}")) > /dev/null openssl req -new -sha256 -key "certs/${domain}/privkey.pem" -out "certs/${domain}/cert.csr" -subj "/CN=${domain}/" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=${SAN}")) > /dev/null
fi fi
@@ -73,7 +73,7 @@ sign_domain() {
status="$(echo "${result}" | grep -Eo '"status":\s*"[^"]*"' | cut -d'"' -f4)" status="$(echo "${result}" | grep -Eo '"status":\s*"[^"]*"' | cut -d'"' -f4)"
if [ ! "${status}" = "pending" ] && [ ! "${status}" = "valid" ]; then if [ ! "${status}" = "pending" ] && [ ! "${status}" = "valid" ]; then
echo " + Challenge is invalid!" echo " + Challenge is invalid! (${result})"
exit 1 exit 1
fi fi
@@ -91,6 +91,13 @@ sign_domain() {
echo " + Done!" echo " + Done!"
} }
if [ ! -e "private_key.pem" ]; then
echo "+ Generating account key..."
openssl genrsa -out "private_key.pem" 4096 2> /dev/null > /dev/null
echo "+ Registering account key with letsencrypt..."
register
fi
cat domains.txt | sed 's/^\s*//g;s/\s*$//g' | grep -v '^#' | grep -v '^$' | while read line; do cat domains.txt | sed 's/^\s*//g;s/\s*$//g' | grep -v '^#' | grep -v '^$' | while read line; do
sign_domain $line sign_domain $line
done done