Cyrus Joudieh
4 years ago
5 changed files with 269 additions and 5 deletions
Unified View
Diff Options
-
+87 -1README.md
-
+39 -0dns_scripts/dns_add_windows_dns_server
-
+39 -0dns_scripts/dns_del_windows_dns_server
-
+9 -4getssl
-
+95 -0other_scripts/iis_install_certeficate.ps1
+ 87
- 1
README.md
View File
+ 39
- 0
dns_scripts/dns_add_windows_dns_server
View File
| @ -0,0 +1,39 @@ | |||||
| #!/bin/bash | |||||
| # Windows DNS server using powershell - dnscmd is going to be deprecated | |||||
| # Using Windows Sublinux for executing windows commands | |||||
| # dnscmd command will be depricated use powershell instead | |||||
| regexp='[A-z0-9]+(\.(co|com))?\.\w+$' | |||||
| fulldomain=${1} | |||||
| # Get root domain api.[domain|.co|.uk] | |||||
| rootdomain=$(echo "${fulldomain}" | grep -Eo "${regexp}") | |||||
| # Exlude root domain [api].domain.com | |||||
| subdomain=$(result=$(echo "${fulldomain}" | grep -Po '(.*)(?=\.[A-z0-9]+(\.(co|com))?\.\w+$)') && if [[ ${#result} -gt 0 ]]; then echo ".${result}"; else echo ""; fi) | |||||
| token=${2} | |||||
| nloop=1 | |||||
| retries=15 # Sometimes it fails | |||||
| while [[ ${nloop} -le ${retries} ]]; do | |||||
| # Add TXT record | |||||
| echo "Tries ${nloop} out of ${retries}" | |||||
| echo "Adding acme challenge record for ${fulldomain} with token ${token}" | |||||
| cmd=(powershell.exe Add-DnsServerResourceRecord -DescriptiveText \'"${token}"\' -Name \'"_acme-challenge${subdomain}"\' -Txt -ZoneName \'"${rootdomain}"\' -TimeToLive 0:0:0:1) | |||||
| echo "${cmd[@]}" | |||||
| result_stderr=$({ "${cmd[@]}" ;} 2>&1) | |||||
| if [[ ${#result_stderr} -eq 0 ]]; then | |||||
| break | |||||
| else | |||||
| echo "${result_stderr}" | |||||
| fi | |||||
| nloop=$((nloop+1)) | |||||
| echo "Sleeping 5 seconds" | |||||
| sleep 5 | |||||
| done | |||||
+ 39
- 0
dns_scripts/dns_del_windows_dns_server
View File
| @ -0,0 +1,39 @@ | |||||
| #!/bin/bash | |||||
| # Windows DNS server using powershell - dnscmd is going to be deprecated | |||||
| # Using Windows Sublinux for executing windows commands | |||||
| # dnscmd command will be depricated use powershell instead | |||||
| regexp='[A-z0-9]+(\.(co|com))?\.\w+$' | |||||
| fulldomain=${1} | |||||
| # Get root domain api.[domain|.co|.uk] | |||||
| rootdomain=$(echo "${fulldomain}" | grep -Eo "${regexp}") | |||||
| # Exlude root domain [api].domain.com | |||||
| subdomain=$(result=$(echo "${fulldomain}" | grep -Po '(.*)(?=\.[A-z0-9]+(\.(co|com))?\.\w+$)') && if [[ ${#result} -gt 0 ]]; then echo ".${result}"; else echo ""; fi) | |||||
| token=${2} | |||||
| nloop=1 | |||||
| retries=15 # Sometimes it fails | |||||
| while [[ ${nloop} -le ${retries} ]]; do | |||||
| # Delete TXT record | |||||
| echo "Tries ${nloop} out of ${retries}" | |||||
| echo "Deleting acme challenge record for ${fulldomain} with token ${token}" | |||||
| cmd=(powershell.exe Remove-DnsServerResourceRecord -RRType TXT -Name \'"_acme-challenge${subdomain}"\' -ZoneName \'"${rootdomain}"\' -RecordData \'"${token}"\' -Force) | |||||
| echo "${cmd[@]}" | |||||
| result_stderr=$({ "${cmd[@]}" ;} 2>&1) | |||||
| if [[ ${#result_stderr} -eq 0 ]]; then | |||||
| break | |||||
| else | |||||
| echo "${result_stderr}" | |||||
| fi | |||||
| nloop=$((nloop+1)) | |||||
| echo "Sleeping 5 seconds" | |||||
| sleep 5 | |||||
| done | |||||
+ 9
- 4
getssl
View File
+ 95
- 0
other_scripts/iis_install_certeficate.ps1
View File
| @ -0,0 +1,95 @@ | |||||
| # Generate PFX for IIS (Internet Information Service) | |||||
| # Load libraries | |||||
| #Add-Type -AssemblyName 'C:\Windows\System32\inetsrv\Microsoft.Web.Administration.dll' | |||||
| using assembly C:\Windows\System32\inetsrv\Microsoft.Web.Administration.dll | |||||
| $FullDomain = $args[0] | |||||
| $DebugPreference = "Continue" | |||||
| # $DebugPreference="SilentlyContinue" | |||||
| $IIS_SiteName = $args[1] | |||||
| $Path = $args[2] | |||||
| # Files | |||||
| $PfxFile = "$Path$FullDomain.pfx" | |||||
| $CrtFile = "$Path$FullDomain.crt" | |||||
| $KeyFile = "$Path$FullDomain.key" | |||||
| Write-Debug "Generating pfx certificate" | |||||
| openssl pkcs12 -inkey "$KeyFile" -in "$CrtFile" -password pass:$FullDomain -export -out "$PfxFile" | |||||
| # Delete old certificate and install the new PFX Certificate | |||||
| # Get all certificates | |||||
| $Store = New-Object System.Security.Cryptography.X509Certificates.X509Store("My", "LocalMachine") | |||||
| $Store.Open("MaxAllowed") | |||||
| # Loop over all and delete matching certificate for the current domain | |||||
| $Ssc = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2Collection | |||||
| for ($i = 0; $i -lt $Store.Certificates.Count; $i++) { | |||||
| $Item = $Store.Certificates.Item($i) | |||||
| if ($Item.subject.Contains($FullDomain)) { | |||||
| Write-Debug "Adding $FullDomain certificate for deletion!" | |||||
| $result=$Ssc.Add($Item) | |||||
| } | |||||
| } | |||||
| for ($i = 0; $i -lt $Ssc.Count; $i++) { | |||||
| Write-Debug "Deleting $FullDomain certificate!" | |||||
| $Store.RemoveRange($Ssc.Item($i)) | |||||
| } | |||||
| # $X509KeyStorageFlags Enums | |||||
| $X509KeyStorageFlagsExportable = 4 | |||||
| $X509KeyStorageFlagsPersistKeySet = 16 | |||||
| $X509KeyStorageFlagsMachineKeySet = 2 | |||||
| <# | |||||
| $X509KeyStorageFlagsDefaultKeySet=0 | |||||
| $X509KeyStorageFlagsUserKeySet=1 | |||||
| $X509KeyStorageFlagsUserProtected=8 | |||||
| $X509KeyStorageFlagsEphemeralKeySet=32 | |||||
| #> | |||||
| # Prepare for loading new certificated | |||||
| $PFXCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2($PfxFile, $FullDomain, | |||||
| ( | |||||
| $X509KeyStorageFlagsExportable + | |||||
| $X509KeyStorageFlagsPersistKeySet + | |||||
| $X509KeyStorageFlagsMachineKeySet | |||||
| ) | |||||
| ) | |||||
| #Save New Cert | |||||
| $Store.Add($PFXCert); | |||||
| $Store.Close(); | |||||
| # IIS Binding - Need to rebind the domain to the new certificate | |||||
| $Manager = New-Object Microsoft.Web.Administration.ServerManager | |||||
| $Site = $Manager.Sites[$IIS_SiteName] | |||||
| for ($i = 0; $i -lt $Site.Bindings.Count; $i++) { | |||||
| $Bind = $Site.Bindings.Item($i); | |||||
| $Protocol = $Bind.Protocol | |||||
| $hostname = $Bind.Host | |||||
| if ($Protocol -eq "https") { | |||||
| Write-Debug "Binding ${protocol}://${hostname}" | |||||
| $Bind.CertificateHash = $PFXCert.GetCertHash() | |||||
| } | |||||
| } | |||||
| $Manager.CommitChanges() | |||||
| Write-Debug "PFX complete!" | |||||