Dan Schaper
2a21cdcf53
Shellcheck
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
9444e691a6
Refactoring and framing skeleton. Commands follow noun verb format.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
cd8d5b8d8e
Account command help.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
84b7e13a2a
Move logic for key creation to argparser. Refactor code and remove
account specific key creation function.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
69d5f164b2
Account generation function ported to `busybox`.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
1b1f638b72
Change variable sourcing to replace variables with supplied environment
defaults. `:-` becomes `:=`.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
8aba88febf
Remove `requires` function. Dependencies handled by docker image.
Add Neilpang's `acme.sh` as attribution.
Set default public DNS server to Google.
Modify openssl key generator.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
63e01f0c55
Further tweaks to cert_archive function. Report status to terminal and remove one extra date call.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
523db8b70a
Adjust for storing script in / and not in path.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
130abe36e4
Change numeric comparison to string comparison. Always compare against "true".
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
1f0d3b1a6e
Clean out upgrade option calls and variables.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
1ebc972053
Remove commented bash version check, required version always included.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
04e9da36ee
DNS check function uses native nslookup, remove DNS_CHECK_FUNC
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
d164db527f
Remove required binary checks, dependencies are built in to the image.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
0293837c3e
`cert_archive` cleanup.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
298b012d5f
Remove OS specific `sed` function. Hardcode `sed` in to calling functions.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
cbde566c40
OS: Remove bsd code
OS: Remove linux and cygwin
OS: Remove os
OS: Remove mac
OS: Remove unknown os
Remove OS detection. Alpine in Docker will always run busybox.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
8cbe7b9d84
Rename to getsslD and strip out internal upgrade process. Internal upgrades don't work for docker.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
7afd93f707
Allow for variables to be set in the environment. Consideration for Docker Compose tool.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
92f32a9fb0
Clean up help message
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
d85e245bf3
No need to keep prior versions of the script in Docker. Working directory is also static for volume/bind mounting.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
6545ffd288
Remove update options from Usage and Help. Run in Docker does not upgrade.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
220757129c
Remove update options from Usage and Help. Run in Docker does not upgrade.
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Dan Schaper
6928395406
Clean up help message
Signed-off-by: Dan Schaper <dschaper@ganymeade.com>
8 years ago
Yannic Haupenthal
d0447886c9
Add OCSP Must-Staple
This implements a new variable OCSP_MUST_STAPLE which adds the OCSP Must-Staple detail to the SAN section of the CSR.
If the openssl version is >= 1.1.0, one can also use "tlsfeature = status_request".
See [this blog post](https://scotthelme.co.uk/ocsp-must-staple/ ) for more details.
9 years ago
srvrco
cb7779102a
issue #243 additional compatibility with bash 3.0
9 years ago
srvrco
33f6eb9963
maintain compatibility with bash 3.0 Issue #243
9 years ago
srvrco
3dd1b35807
issue #232 use neutral locale for date formatting
9 years ago
srvrco
51f59b5276
issue #231 mingw bugfix and typos in debug messages
9 years ago
srvrco
df3285deee
bugfix - deleting csr ( #227 ) and check domain/private key different ( #228 )
9 years ago
srvrco
60e04aeeaa
added drill, dig or host as alternatives to nslookup
9 years ago
srvrco
7c8e517164
force renew if FORCE_RENEWAL file exists #214
9 years ago
srvrco
ed519319f7
Created check_config function to list all obvious config issues
9 years ago
srvrco
e9ec9067e8
add additional config checks
9 years ago
srvrco
0ef348b5e7
ignore expiry if upgrading from staging to live server
9 years ago
srvrco
c3f380e527
include key types in config check
9 years ago
srvrco
b901b9d3ec
dont loop over domains for DNS_ADD_COMMAND check
9 years ago
srvrco
f9696802e0
updated history
9 years ago
srvrco
0c519f52e0
add check config function
9 years ago
srvrco
d76f4952ea
small typo, and modified formatting
9 years ago
micheloe
b3988013e8
Added explicit sorting on old file versions
9 years ago
micheloe
c854baffd7
Added option to limit amount of old versions to keep (2.01)
9 years ago
srvrco
5e5d501082
stable release 2.00
9 years ago
micheloe
c0d6c8e962
tidied up upgrade tmpfile handling (1.95)
9 years ago
micheloe
e150ad067a
fix leftover tmpfiles in upgrade routine (1.94)
9 years ago
srvrco
9fc0928d33
update checks to work with openssl in FIPS mode (1.93)
9 years ago
Felipe Zipitria
510ba53c16
check generated keys without depending on inside text
In openssl FIPS mode, files don't have the "[RSA|EC] PRIVATE KEY" text inside when the private key is generated.
Therefore, grep will not find the words and fails with invalid key file.
Resolves : #204
9 years ago
srvrco
e6da3ddbbd
bug fix for copying tokens to multiple locations
9 years ago
srvrco
511ccd4285
allow copying files to multiple locations (1.91)
9 years ago
srvrco
058818239e
included IGNORE_DIRECTORY_DOMAIN option #196
9 years ago