Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
3bc66282
Unverified
Commit
3bc66282
authored
Jan 11, 2019
by
shonenada
Browse files
Update Qiniu's domain settings after uploading certificate
parent
e19809d5
Changes
2
Show whitespace changes
Inline
Side-by-side
acme.sh
View file @
3bc66282
...
...
@@ -1580,7 +1580,7 @@ _inithttp() {
fi
if
[
-z
"
$_ACME_CURL
"
]
&&
_exists
"curl"
;
then
_ACME_CURL
=
"curl -L --dump-header
$HTTP_HEADER
"
_ACME_CURL
=
"curl -L
--silent
--dump-header
$HTTP_HEADER
"
if
[
"
$DEBUG
"
]
&&
[
"
$DEBUG
"
-ge
"2"
]
;
then
_CURL_DUMP
=
"
$(
_mktemp
)
"
_ACME_CURL
=
"
$_ACME_CURL
--trace-ascii
$_CURL_DUMP
"
...
...
deploy/qiniu.sh
View file @
3bc66282
...
...
@@ -44,30 +44,53 @@ qiniu_deploy() {
string_fullchain
=
$(
awk
'{printf "%s\\n", $0}'
"
$_cfullchain
"
)
string_key
=
$(
awk
'{printf "%s\\n", $0}'
"
$_ckey
"
)
body
=
"{
\"
name
\"
:
\"
$_cdomain
\"
,
\"
common_name
\"
:
\"
$_cdomain
\"
,
\"
ca
\"
:
\"
"
$string_fullchain
"
\"
,
\"
pri
\"
:
\"
$string_key
\"
}"
sslcerl_
body
=
"{
\"
name
\"
:
\"
$_cdomain
\"
,
\"
common_name
\"
:
\"
$_cdomain
\"
,
\"
ca
\"
:
\"
"
$string_fullchain
"
\"
,
\"
pri
\"
:
\"
$string_key
\"
}"
create_ssl_url
=
"
$QINIU_API_BASE
/sslcert"
ACCESSTOKEN
=
"
$(
_make_sslcreate_access_token
)
"
export
_H1
=
"Authorization: QBox
$ACCESSTOKEN
"
sslcert_access_token
=
"
$(
_make_sslcreate_access_token
"/sslcert
\\
n"
)
"
_debug sslcert_access_token
"
$sslcert_access_token
"
export
_H1
=
"Authorization: QBox
$sslcert_access_token
"
_response
=
$(
_post
"
$body
"
"
$create_ssl_url
"
0
"POST"
"application/json"
| _dbase64
"multiline"
)
sslcert
_response
=
$(
_post
"
$
sslcerl_
body
"
"
$create_ssl_url
"
0
"POST"
"application/json"
| _dbase64
"multiline"
)
success_response
=
"certID"
if
test
"
${
_response
#*
$success_response
}
"
==
"
$_response
"
;
then
_err
"Error in
deploy
ing certificate:"
_err
"
$_response
"
if
test
"
${
sslcert
_response
#*
$success_response
}
"
==
"
$
sslcert
_response
"
;
then
_err
"Error in
creat
ing certificate:"
_err
"
$
sslcert
_response
"
return
1
fi
_debug response
"
$_response
"
_debug sslcert_response
"
$sslcert_response
"
_info
"Certificate successfully uploaded, updating domain
$_cdomain
"
_certId
=
$(
printf
"%s"
$sslcert_response
|
sed
-e
"s/^.*certID
\"
:
\"
//"
-e
"s/
\"\}
$/
/"
)
_debug certId
"
$_certId
"
update_path
=
"/domain/
$_cdomain
/httpsconf"
update_url
=
"
$QINIU_API_BASE$update_path
"
update_body
=
"{
\"
certid
\"
:
\"
"
$_certId
"
\"
,
\"
forceHttps
\"
:true}"
update_access_token
=
"
$(
_make_sslcreate_access_token
"
$update_path
\\
n"
)
"
_debug update_access_token
"
$update_access_token
"
export
_H1
=
"Authorization: QBox
$update_access_token
"
update_response
=
$(
_post
"
$update_body
"
"
$update_url
"
0
"PUT"
"application/json"
| _dbase64
"multiline"
)
err_response
=
"error"
if
test
"
${
update_response
#*
$err_response
}
"
!=
"
$update_response
"
;
then
_err
"Error in updating domain:"
_err
"
$update_response
"
return
1
fi
_debug update_response
"
$update_response
"
_info
"Certificate successfully deployed"
return
0
}
_make_sslcreate_access_token
()
{
_data
=
"
/sslcert
\\
n
"
_data
=
"
$1
"
_token
=
"
$(
printf
"
$_data
"
| openssl sha1
-hmac
$Le_Deploy_Qiniu_SK
-binary
| openssl
base64
-e
)
"
echo
"
$Le_Deploy_Qiniu_AK
:
$_token
"
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment