|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+#!/bin/bash
|
|
|
2
|
+# Easy letsencrypt certs using a bash script.
|
|
|
3
|
+# v1.2 - 12/13/2015
|
|
|
4
|
+# By Brielle Bruns <bruns@2mbit.com>
|
|
|
5
|
+# http://www.sosdg.org
|
|
|
6
|
+
|
|
|
7
|
+
|
|
|
8
|
+# Use like: gen-cert.sh -d domain1.com -d domain2.com
|
|
|
9
|
+#
|
|
|
10
|
+# There are three options for authentication:
|
|
|
11
|
+#
|
|
|
12
|
+# 1) Webroot (normal)
|
|
|
13
|
+# Specify -r flag with -d and -e flags.
|
|
|
14
|
+# gen-cert.sh -d domain1.com -r /var/www/domain1.com
|
|
|
15
|
+#
|
|
|
16
|
+# 2) Webroot (alias)
|
|
|
17
|
+# Same as #1, but also include an alias directive in apache like in:
|
|
|
18
|
+# http://users.sosdg.org/~bruns/lets-encrypt/apache-le-alias.conf
|
|
|
19
|
+# And:
|
|
|
20
|
+# mkdir -p /var/www/letsencrypt-root/.well-known/acme-challenge
|
|
|
21
|
+# gen-cert.sh -d domain1.com -d domain2.com -r /var/www/letsencrypt-root/.well-known/acme-challenge
|
|
|
22
|
+#
|
|
|
23
|
+# 3) Proxy auth
|
|
|
24
|
+# This auth method uses the standalone authenticator with a mod_proxy
|
|
|
25
|
+# http://users.sosdg.org/~bruns/lets-encrypt/apache-le-proxy.conf
|
|
|
26
|
+# Original proxy idea from:
|
|
|
27
|
+# http://evolvedigital.co.uk/how-to-get-letsencrypt-working-with-ispconfig-3/
|
|
|
28
|
+
|
|
|
29
|
+PROXYAUTH="--standalone --standalone-supported-challenges http-01 --http-01-port 9999"
|
|
|
30
|
+
|
|
|
31
|
+while getopts "d:r:e:" opt; do
|
|
|
32
|
+ case $opt in
|
|
|
33
|
+ d) domains+=("$OPTARG");;
|
|
|
34
|
+ r) webroot=("$OPTARG");;
|
|
|
35
|
+ e) email=("$OPTARG");;
|
|
|
36
|
+ esac
|
|
|
37
|
+done
|
|
|
38
|
+
|
|
|
39
|
+if [[ ! -z ${email} ]]; then
|
|
|
40
|
+ email="--email ${email}"
|
|
|
41
|
+else
|
|
|
42
|
+ email=""
|
|
|
43
|
+fi
|
|
|
44
|
+
|
|
|
45
|
+# Webroot auth method, activated with -r
|
|
|
46
|
+WEBAUTH="-a webroot --webroot-path ${webroot}"
|
|
|
47
|
+
|
|
|
48
|
+if [[ -z ${webroot} ]]; then
|
|
|
49
|
+ AUTH=${PROXYAUTH}
|
|
|
50
|
+else
|
|
|
51
|
+ AUTH=${WEBAUTH}
|
|
|
52
|
+fi
|
|
|
53
|
+
|
|
|
54
|
+shift $((OPTIND -1))
|
|
|
55
|
+for val in "${domains[@]}"; do
|
|
|
56
|
+ DOMAINS="${DOMAINS} -d ${val} "
|
|
|
57
|
+done
|
|
|
58
|
+
|
|
|
59
|
+
|
|
|
60
|
+
|
|
|
61
|
+cd /usr/src/letsencrypt
|
|
|
62
|
+./letsencrypt-auto ${email} \
|
|
|
63
|
+ --server https://acme-v01.api.letsencrypt.org/directory \
|
|
|
64
|
+ --agree-tos \
|
|
|
65
|
+ --renew-by-default \
|
|
|
66
|
+ ${AUTH} \
|
|
|
67
|
+ ${DOMAINS} \
|
|
|
68
|
+ certonly
|
