Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
6cb415f5
Commit
6cb415f5
authored
Apr 06, 2016
by
neil
Browse files
Support revoke cert
parent
de9fd54e
Changes
2
Hide whitespace changes
Inline
Side-by-side
README.md
View file @
6cb415f5
...
...
@@ -78,7 +78,7 @@ Show help message:
```
root@v1:~# le.sh
https://github.com/Neilpang/le
v1.2.
2
v1.2.
3
Usage: le.sh [command] ...[args]....
Available commands:
...
...
@@ -94,6 +94,8 @@ renewAll:
Renew all the certs.
uninstall:
Uninstall le.sh, and uninstall the cron job.
revoke:
Revoke a cert.
version:
Show version info.
installcronjob:
...
...
@@ -111,6 +113,7 @@ createCSR:
root@v1:~/le# le issue
Usage: le issue webroot|no|apache|dns a.com [www.a.com,b.com,c.com]|no [key-length]|no
...
...
le.sh
View file @
6cb415f5
#!/usr/bin/env bash
VER
=
1.2.
2
VER
=
1.2.
3
PROJECT
=
"https://github.com/Neilpang/le"
DEFAULT_CA
=
"https://acme-v01.api.letsencrypt.org"
...
...
@@ -1474,6 +1474,60 @@ uninstallcronjob() {
}
revoke
()
{
Le_Domain
=
"
$1
"
if
[
-z
"
$Le_Domain
"
]
;
then
_err
"Usage: revoke domain.com"
return
1
fi
_initpath
$Le_Domain
if
[
!
-f
"
$DOMAIN_CONF
"
]
;
then
_err
"
$Le_Domain
is not a issued domain, skip."
return
1
;
fi
if
[
!
-f
"
$CERT_PATH
"
]
;
then
_err
"Cert for
$Le_Domain
$CERT_PATH
is not found, skip."
return
1
fi
cert
=
"
$(
_getfile
"
${
CERT_PATH
}
"
"
${
BEGIN_CERT
}
"
"
${
END_CERT
}
"
|
tr
-d
"
\r\n
"
| _urlencode
)
"
if
[
-z
"
$cert
"
]
;
then
_err
"Cert for
$Le_Domain
is empty found, skip."
return
1
fi
data
=
"{
\"
resource
\"
:
\"
revoke-cert
\"
,
\"
certificate
\"
:
\"
$cert
\"
}"
uri
=
"
$API
/acme/revoke-cert"
_info
"Try domain key first."
if
_send_signed_request
$uri
"
$data
"
""
"
$CERT_KEY_PATH
"
;
then
if
[
-z
"
$response
"
]
;
then
_info
"Revoke success."
rm
-f
$CERT_PATH
return
0
else
_err
"Revoke error by domain key."
_err
"
$resource
"
fi
fi
_info
"Then try account key."
if
_send_signed_request
$uri
"
$data
"
""
"
$ACCOUNT_KEY_PATH
"
;
then
if
[
-z
"
$response
"
]
;
then
_info
"Revoke success."
rm
-f
$CERT_PATH
return
0
else
_err
"Revoke error."
_debug
"
$resource
"
fi
fi
return
1
}
# Detect profile file if not specified as environment variable
_detect_profile
()
{
...
...
@@ -1690,6 +1744,8 @@ renewAll:
Renew all the certs.
uninstall:
Uninstall le.sh, and uninstall the cron job.
revoke:
Revoke a cert.
version:
Show version info.
installcronjob:
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment