dbxe
/
fusionpbx-install.sh
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update letsencrypt.sh

This commit is contained in:
FusionPBX 2018-07-21 00:18:39 -06:00 committed by GitHub
parent 5e84c0ac1e
commit daa7c6b69f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 43 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
freebsd/resources/letsencrypt.sh
View File

@ -23,14 +23,6 @@ cd "$(dirname "$0")"
read -p 'Domain Name: ' domain_name read -p 'Domain Name: ' domain_name
read -p 'Email Address: ' email_address read -p 'Email Address: ' email_address
#wildcard detection
wilcard_domain=$(echo $domain_name | cut -c1-1)
if [ "$wilcard_domain" = "*" ]; then
wilcard_domain="y"
else
wilcard_domain="n"
fi
#get and install dehydrated #get and install dehydrated
pkg install dehydrated pkg install dehydrated
#cd /usr/src && git clone https://github.com/lukas2511/dehydrated.git #cd /usr/src && git clone https://github.com/lukas2511/dehydrated.git
@ -39,16 +31,6 @@ pkg install dehydrated
#mkdir -p /usr/local/www/dehydrated #mkdir -p /usr/local/www/dehydrated
#mkdir -p /usr/local/etc/dehydrated/certs #mkdir -p /usr/local/etc/dehydrated/certs
#remove the wildcard and period
if [ .$wilcard_domain = ."y" ]; then
domain_name=$(echo "$domain_name" | cut -c3-255)
fi
#create an alias when using wildcard dns
#if [ .$wilcard_domain = ."y" ]; then
# echo "*.$domain_name > $domain_name" > /usr/local/etc/dehydrated/domains.txt
#fi
#manual dns hook #manual dns hook
cd /usr/src cd /usr/src
git clone https://github.com/owhen/dns-01-manual.git git clone https://github.com/owhen/dns-01-manual.git
@ -67,13 +49,31 @@ cp docs/examples/config /usr/local/etc/dehydrated
#accept the terms #accept the terms
dehydrated --register --accept-terms --config /usr/local/etc/dehydrated/config dehydrated --register --accept-terms --config /usr/local/etc/dehydrated/config
#wildcard detection
wilcard_domain=$(echo $domain_name | cut -c1-1)
if [ "$wilcard_domain" = "*" ]; then
wilcard_domain="true"
else
wilcard_domain="false"
fi
#remove the wildcard and period
if [ .$wilcard_domain = ."true" ]; then
domain_name=$(echo "$domain_name" | cut -c3-255)
fi
#create an alias when using wildcard dns
#if [ .$wilcard_domain = ."true" ]; then
# echo "*.$domain_name > $domain_name" > /usr/local/etc/dehydrated/domains.txt
#fi
#wildcard domain #wildcard domain
if [ .$wilcard_domain = ."y" ]; then if [ .$wilcard_domain = ."true" ]; then
dehydrated --cron --domain *.$domain_name --alias $domain_name --config /usr/local/etc/dehydrated/config --out /usr/local/etc/dehydrated/certs --challenge dns-01 --hook /usr/local/etc/dehydrated/hook.sh dehydrated --cron --domain *.$domain_name --alias $domain_name --config /usr/local/etc/dehydrated/config --out /usr/local/etc/dehydrated/certs --challenge dns-01 --hook /usr/local/etc/dehydrated/hook.sh
fi fi
#single domain #single domain
if [ .$wilcard_domain = ."n" ]; then if [ .$wilcard_domain = ."false" ]; then
dehydrated --cron --domain $domain_name --config /usr/local/etc/dehydrated/config --config /usr/local/etc/dehydrated/config --out /usr/local/etc/dehydrated/certs --challenge dns-01 --hook /usr/local/etc/dehydrated/hook.sh dehydrated --cron --domain $domain_name --config /usr/local/etc/dehydrated/config --config /usr/local/etc/dehydrated/config --out /usr/local/etc/dehydrated/certs --challenge dns-01 --hook /usr/local/etc/dehydrated/hook.sh
fi fi
@ -90,28 +90,31 @@ cp /usr/local/etc/dehydrated/certs/$domain_name/privkey.pem /usr/local/etc/nginx
#read the config #read the config
/usr/local/sbin/nginx -t && /usr/local/sbin/nginx -s reload /usr/local/sbin/nginx -t && /usr/local/sbin/nginx -s reload
#make sure the freeswitch directory exists #setup freeswitch tls
mkdir -p /usr/local/etc/freeswitch/tls if [ .$switch_tls = ."true" ]; then
#make sure the freeswitch directory exists
mkdir -p /usr/local/etc/freeswitch/tls
#make sure the freeswitch certificate directory is empty #make sure the freeswitch certificate directory is empty
rm /usr/local/etc/freeswitch/tls/* rm /usr/local/etc/freeswitch/tls/*
#combine the certs into all.pem #combine the certs into all.pem
cat /usr/local/etc/dehydrated/certs/$domain_name/fullchain.pem > /usr/local/etc/freeswitch/tls/all.pem cat /usr/local/etc/dehydrated/certs/$domain_name/fullchain.pem > /usr/local/etc/freeswitch/tls/all.pem
cat /usr/local/etc/dehydrated/certs/$domain_name/privkey.pem >> /usr/local/etc/freeswitch/tls/all.pem cat /usr/local/etc/dehydrated/certs/$domain_name/privkey.pem >> /usr/local/etc/freeswitch/tls/all.pem
#cat /usr/local/etc/dehydrated/certs/$domain_name/chain.pem >> /usr/local/etc/freeswitch/tls/all.pem #cat /usr/local/etc/dehydrated/certs/$domain_name/chain.pem >> /usr/local/etc/freeswitch/tls/all.pem
#copy the certificates #copy the certificates
cp /usr/local/etc/dehydrated/certs/$domain_name/cert.pem /usr/local/etc/freeswitch/tls cp /usr/local/etc/dehydrated/certs/$domain_name/cert.pem /usr/local/etc/freeswitch/tls
cp /usr/local/etc/dehydrated/certs/$domain_name/chain.pem /usr/local/etc/freeswitch/tls cp /usr/local/etc/dehydrated/certs/$domain_name/chain.pem /usr/local/etc/freeswitch/tls
cp /usr/local/etc/dehydrated/certs/$domain_name/fullchain.pem /usr/local/etc/freeswitch/tls cp /usr/local/etc/dehydrated/certs/$domain_name/fullchain.pem /usr/local/etc/freeswitch/tls
cp /usr/local/etc/dehydrated/certs/$domain_name/privkey.pem /usr/local/etc/freeswitch/tls cp /usr/local/etc/dehydrated/certs/$domain_name/privkey.pem /usr/local/etc/freeswitch/tls
#add symbolic links #add symbolic links
ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/agent.pem ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/agent.pem
ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/tls.pem ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/tls.pem
ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/wss.pem ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/wss.pem
ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/dtls-srtp.pem ln -s /usr/local/etc/freeswitch/tls/all.pem /usr/local/etc/freeswitch/tls/dtls-srtp.pem
#set the permissions #set the permissions
chown -R www:www /usr/local/etc/freeswitch/tls chown -R www:www /usr/local/etc/freeswitch/tls
fi