mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-16 16:36:48 +01:00
92 lines
3.1 KiB
Bash
Executable File
92 lines
3.1 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
deploy_challenge() {
|
|
local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}"
|
|
|
|
# This hook is called once for every domain that needs to be
|
|
# validated, including any alternative names you may have listed.
|
|
#
|
|
# Parameters:
|
|
# - DOMAIN
|
|
# The domain name (CN or subject alternative name) being
|
|
# validated.
|
|
# - TOKEN_FILENAME
|
|
# The name of the file containing the token to be served for HTTP
|
|
# validation. Should be served by your web server as
|
|
# /.well-known/acme-challenge/${TOKEN_FILENAME}.
|
|
# - TOKEN_VALUE
|
|
# The token value that needs to be served for validation. For DNS
|
|
# validation, this is what you want to put in the _acme-challenge
|
|
# TXT record. For HTTP validation it is the value that is expected
|
|
# be found in the $TOKEN_FILENAME file.
|
|
}
|
|
|
|
clean_challenge() {
|
|
local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}"
|
|
|
|
# This hook is called after attempting to validate each domain,
|
|
# whether or not validation was successful. Here you can delete
|
|
# files or DNS records that are no longer needed.
|
|
#
|
|
# The parameters are the same as for deploy_challenge.
|
|
}
|
|
|
|
deploy_cert() {
|
|
local DOMAIN="${1}" KEYFILE="${2}" CERTFILE="${3}" FULLCHAINFILE="${4}" CHAINFILE="${5}" TIMESTAMP="${6}"
|
|
|
|
# This hook is called once for each certificate that has been
|
|
# produced. Here you might, for instance, copy your new certificates
|
|
# to service-specific locations and reload the service.
|
|
#
|
|
# Parameters:
|
|
# - DOMAIN
|
|
# The primary domain name, i.e. the certificate common
|
|
# name (CN).
|
|
# - KEYFILE
|
|
# The path of the file containing the private key.
|
|
# - CERTFILE
|
|
# The path of the file containing the signed certificate.
|
|
# - FULLCHAINFILE
|
|
# The path of the file containing the full certificate chain.
|
|
# - CHAINFILE
|
|
# The path of the file containing the intermediate certificate(s).
|
|
# - TIMESTAMP
|
|
# Timestamp when the specified certificate was created.
|
|
}
|
|
|
|
unchanged_cert() {
|
|
local DOMAIN="${1}" KEYFILE="${2}" CERTFILE="${3}" FULLCHAINFILE="${4}" CHAINFILE="${5}"
|
|
|
|
# This hook is called once for each certificate that is still
|
|
# valid and therefore wasn't reissued.
|
|
#
|
|
# Parameters:
|
|
# - DOMAIN
|
|
# The primary domain name, i.e. the certificate common
|
|
# name (CN).
|
|
# - KEYFILE
|
|
# The path of the file containing the private key.
|
|
# - CERTFILE
|
|
# The path of the file containing the signed certificate.
|
|
# - FULLCHAINFILE
|
|
# The path of the file containing the full certificate chain.
|
|
# - CHAINFILE
|
|
# The path of the file containing the intermediate certificate(s).
|
|
}
|
|
|
|
function invalid_challenge {
|
|
local DOMAIN="${1}" RESPONSE="${2}"
|
|
|
|
# This hook is called if the challenge response has failed, so domain
|
|
# owners can be aware and act accordingly.
|
|
#
|
|
# Parameters:
|
|
# - DOMAIN
|
|
# The primary domain name, i.e. the certificate common
|
|
# name (CN).
|
|
# - RESPONSE
|
|
# The response that the verification server returned
|
|
}
|
|
|
|
HANDLER="$1"; shift
|
|
"$HANDLER" "$@" |