ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

playbook/roles/cert-manager/files/certs_automated_issuance.sh: update

Browse Source
This commit is contained in:
Haitao Pan 2023-10-07 10:04:47 +08:00
parent 23d78bf1f7
commit bb06e502c7
1 changed files with 30 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
playbook/roles/cert-manager/files/certs_automated_issuance.sh
View File

@ -1,16 +1,37 @@
#!/bin/bash
#!/bin/bash
set -x
export domain=$1
export Domain=$1
export Ali_Key=$2
export Ali_Secret=$3
# Non-empty check for Ali_Key and Ali_Secret
if [ -z "$Ali_Key" ] || [ -z "$Ali_Secret" ] || [ -z "$domain" ]; then
echo "Domain, Ali_Key and Ali_Secret must not be empty"
exit 1
fi
curl https://get.acme.sh | sh -s email=156405189@qq.com
rm -rvf ${domain}.* -f
sh ~/.acme.sh/acme.sh --set-default-ca --server zerossl --issue --force --dns dns_ali -d ${domain} -d "*.${domain}"
sh ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt --issue --force --dns dns_ali -d ${domain} -d "*.${domain}"
cat ~/.acme.sh/${domain}_ecc/${domain}.cer > ${domain}.pem
cat ~/.acme.sh/${domain}_ecc/ca.cer >> ${domain}.pem
cat ~/.acme.sh/${domain}_ecc/${domain}.key > ${domain}.key
sudo cp ${domain}.pem /etc/ssl/
sudo cp ${domain}.key /etc/ssl/
rm -rvf ${Domain}.* -f
rm -rvf /etc/ssl/${Domain}.* -f
# Try to issue a certificate from ZeroSSL. If it fails, try Let's Encrypt.
if ! sh ~/.acme.sh/acme.sh --set-default-ca --server zerossl --issue --force --dns dns_ali -d ${Domain} -d "*.${Domain}";
then
sh ~/.acme.sh/acme.sh --set-default-ca --server letsencrypt --issue --force --dns dns_ali -d ${Domain} -d "*.${Domain}"
fi
cat ~/.acme.sh/${Domain}_ecc/${domain}.cer > ${Domain}.pem
cat ~/.acme.sh/${Domain}_ecc/ca.cer >> ${Domain}.pem
cat ~/.acme.sh/${Domain}_ecc/${Domain}.key > ${Domain}.key
sudo cp ${Domain}.pem /etc/ssl/
sudo cp ${Domain}.key /etc/ssl/
# Non-empty check for ${domain}.pem and ${Domain}.key
if [ ! -s "${Domain}.pem" ] || [ ! -s "${Domain}.key" ]; then
echo "${Domain}.pem and ${Domain}.key must not be empty"
exit 1
fi