Cyrus Joudieh
4 years ago
5 changed files with 269 additions and 5 deletions
Split View
Diff Options
-
+87 -1README.md
-
+39 -0dns_scripts/dns_add_windows_dns_server
-
+39 -0dns_scripts/dns_del_windows_dns_server
-
+9 -4getssl
-
+95 -0other_scripts/iis_install_certeficate.ps1
+ 87
- 1
README.md
View File
+ 39
- 0
dns_scripts/dns_add_windows_dns_server
View File
| @ -0,0 +1,39 @@ | |||
| #!/bin/bash | |||
| # Windows DNS server using powershell - dnscmd is going to be deprecated | |||
| # Using Windows Sublinux for executing windows commands | |||
| # dnscmd command will be depricated use powershell instead | |||
| regexp='[A-z0-9]+(\.(co|com))?\.\w+$' | |||
| fulldomain=${1} | |||
| # Get root domain api.[domain|.co|.uk] | |||
| rootdomain=$(echo "${fulldomain}" | grep -Eo "${regexp}") | |||
| # Exlude root domain [api].domain.com | |||
| subdomain=$(result=$(echo "${fulldomain}" | grep -Po '(.*)(?=\.[A-z0-9]+(\.(co|com))?\.\w+$)') && if [[ ${#result} -gt 0 ]]; then echo ".${result}"; else echo ""; fi) | |||
| token=${2} | |||
| nloop=1 | |||
| retries=15 # Sometimes it fails | |||
| while [[ ${nloop} -le ${retries} ]]; do | |||
| # Add TXT record | |||
| echo "Tries ${nloop} out of ${retries}" | |||
| echo "Adding acme challenge record for ${fulldomain} with token ${token}" | |||
| cmd=(powershell.exe Add-DnsServerResourceRecord -DescriptiveText \'"${token}"\' -Name \'"_acme-challenge${subdomain}"\' -Txt -ZoneName \'"${rootdomain}"\' -TimeToLive 0:0:0:1) | |||
| echo "${cmd[@]}" | |||
| result_stderr=$({ "${cmd[@]}" ;} 2>&1) | |||
| if [[ ${#result_stderr} -eq 0 ]]; then | |||
| break | |||
| else | |||
| echo "${result_stderr}" | |||
| fi | |||
| nloop=$((nloop+1)) | |||
| echo "Sleeping 5 seconds" | |||
| sleep 5 | |||
| done | |||
+ 39
- 0
dns_scripts/dns_del_windows_dns_server
View File
| @ -0,0 +1,39 @@ | |||
| #!/bin/bash | |||
| # Windows DNS server using powershell - dnscmd is going to be deprecated | |||
| # Using Windows Sublinux for executing windows commands | |||
| # dnscmd command will be depricated use powershell instead | |||
| regexp='[A-z0-9]+(\.(co|com))?\.\w+$' | |||
| fulldomain=${1} | |||
| # Get root domain api.[domain|.co|.uk] | |||
| rootdomain=$(echo "${fulldomain}" | grep -Eo "${regexp}") | |||
| # Exlude root domain [api].domain.com | |||
| subdomain=$(result=$(echo "${fulldomain}" | grep -Po '(.*)(?=\.[A-z0-9]+(\.(co|com))?\.\w+$)') && if [[ ${#result} -gt 0 ]]; then echo ".${result}"; else echo ""; fi) | |||
| token=${2} | |||
| nloop=1 | |||
| retries=15 # Sometimes it fails | |||
| while [[ ${nloop} -le ${retries} ]]; do | |||
| # Delete TXT record | |||
| echo "Tries ${nloop} out of ${retries}" | |||
| echo "Deleting acme challenge record for ${fulldomain} with token ${token}" | |||
| cmd=(powershell.exe Remove-DnsServerResourceRecord -RRType TXT -Name \'"_acme-challenge${subdomain}"\' -ZoneName \'"${rootdomain}"\' -RecordData \'"${token}"\' -Force) | |||
| echo "${cmd[@]}" | |||
| result_stderr=$({ "${cmd[@]}" ;} 2>&1) | |||
| if [[ ${#result_stderr} -eq 0 ]]; then | |||
| break | |||
| else | |||
| echo "${result_stderr}" | |||
| fi | |||
| nloop=$((nloop+1)) | |||
| echo "Sleeping 5 seconds" | |||
| sleep 5 | |||
| done | |||
+ 9
- 4
getssl
View File
+ 95
- 0
other_scripts/iis_install_certeficate.ps1
View File
| @ -0,0 +1,95 @@ | |||
| # Generate PFX for IIS (Internet Information Service) | |||
| # Load libraries | |||
| #Add-Type -AssemblyName 'C:\Windows\System32\inetsrv\Microsoft.Web.Administration.dll' | |||
| using assembly C:\Windows\System32\inetsrv\Microsoft.Web.Administration.dll | |||
| $FullDomain = $args[0] | |||
| $DebugPreference = "Continue" | |||
| # $DebugPreference="SilentlyContinue" | |||
| $IIS_SiteName = $args[1] | |||
| $Path = $args[2] | |||
| # Files | |||
| $PfxFile = "$Path$FullDomain.pfx" | |||
| $CrtFile = "$Path$FullDomain.crt" | |||
| $KeyFile = "$Path$FullDomain.key" | |||
| Write-Debug "Generating pfx certificate" | |||
| openssl pkcs12 -inkey "$KeyFile" -in "$CrtFile" -password pass:$FullDomain -export -out "$PfxFile" | |||
| # Delete old certificate and install the new PFX Certificate | |||
| # Get all certificates | |||
| $Store = New-Object System.Security.Cryptography.X509Certificates.X509Store("My", "LocalMachine") | |||
| $Store.Open("MaxAllowed") | |||
| # Loop over all and delete matching certificate for the current domain | |||
| $Ssc = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2Collection | |||
| for ($i = 0; $i -lt $Store.Certificates.Count; $i++) { | |||
| $Item = $Store.Certificates.Item($i) | |||
| if ($Item.subject.Contains($FullDomain)) { | |||
| Write-Debug "Adding $FullDomain certificate for deletion!" | |||
| $result=$Ssc.Add($Item) | |||
| } | |||
| } | |||
| for ($i = 0; $i -lt $Ssc.Count; $i++) { | |||
| Write-Debug "Deleting $FullDomain certificate!" | |||
| $Store.RemoveRange($Ssc.Item($i)) | |||
| } | |||
| # $X509KeyStorageFlags Enums | |||
| $X509KeyStorageFlagsExportable = 4 | |||
| $X509KeyStorageFlagsPersistKeySet = 16 | |||
| $X509KeyStorageFlagsMachineKeySet = 2 | |||
| <# | |||
| $X509KeyStorageFlagsDefaultKeySet=0 | |||
| $X509KeyStorageFlagsUserKeySet=1 | |||
| $X509KeyStorageFlagsUserProtected=8 | |||
| $X509KeyStorageFlagsEphemeralKeySet=32 | |||
| #> | |||
| # Prepare for loading new certificated | |||
| $PFXCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2($PfxFile, $FullDomain, | |||
| ( | |||
| $X509KeyStorageFlagsExportable + | |||
| $X509KeyStorageFlagsPersistKeySet + | |||
| $X509KeyStorageFlagsMachineKeySet | |||
| ) | |||
| ) | |||
| #Save New Cert | |||
| $Store.Add($PFXCert); | |||
| $Store.Close(); | |||
| # IIS Binding - Need to rebind the domain to the new certificate | |||
| $Manager = New-Object Microsoft.Web.Administration.ServerManager | |||
| $Site = $Manager.Sites[$IIS_SiteName] | |||
| for ($i = 0; $i -lt $Site.Bindings.Count; $i++) { | |||
| $Bind = $Site.Bindings.Item($i); | |||
| $Protocol = $Bind.Protocol | |||
| $hostname = $Bind.Host | |||
| if ($Protocol -eq "https") { | |||
| Write-Debug "Binding ${protocol}://${hostname}" | |||
| $Bind.CertificateHash = $PFXCert.GetCertHash() | |||
| } | |||
| } | |||
| $Manager.CommitChanges() | |||
| Write-Debug "PFX complete!" | |||