You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

140 lines
4.6 KiB

6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
6 years ago
  1. #!/usr/bin/env sh
  2. # Here is the script to deploy the cert to G-Core CDN service (https://gcorelabs.com/ru/) using the G-Core Labs API (https://docs.gcorelabs.com/cdn/).
  3. # Uses command line curl for send requests and jq for parse responses.
  4. # Returns 0 when success.
  5. #
  6. # Written by temoffey <temofffey@gmail.com>
  7. # Public domain, 2019
  8. #export DEPLOY_GCORE_CDN_USERNAME=myusername
  9. #export DEPLOY_GCORE_CDN_PASSWORD=mypassword
  10. ######## Public functions #####################
  11. #domain keyfile certfile cafile fullchain
  12. gcore_cdn_deploy() {
  13. _cdomain="$1"
  14. _ckey="$2"
  15. _ccert="$3"
  16. _cca="$4"
  17. _cfullchain="$5"
  18. _debug _cdomain "$_cdomain"
  19. _debug _ckey "$_ckey"
  20. _debug _ccert "$_ccert"
  21. _debug _cca "$_cca"
  22. _debug _cfullchain "$_cfullchain"
  23. _fullchain=$(tr '\n\r' '@#' <"$_cfullchain" | sed 's/@/\\n/g;s/#/\\r/g')
  24. _key=$(tr '\n\r' '@#' <"$_ckey" | sed 's/@/\\n/g;s/#/\\r/g')
  25. _debug _fullchain "$_fullchain"
  26. _debug _key "$_key"
  27. if [ -z "$DEPLOY_GCORE_CDN_USERNAME" ]; then
  28. if [ -z "$Le_Deploy_gcore_cdn_username" ]; then
  29. _err "Please define the target username: export DEPLOY_GCORE_CDN_USERNAME=username"
  30. return 1
  31. fi
  32. else
  33. Le_Deploy_gcore_cdn_username="$DEPLOY_GCORE_CDN_USERNAME"
  34. _savedomainconf Le_Deploy_gcore_cdn_username "$Le_Deploy_gcore_cdn_username"
  35. fi
  36. if [ -z "$DEPLOY_GCORE_CDN_PASSWORD" ]; then
  37. if [ -z "$Le_Deploy_gcore_cdn_password" ]; then
  38. _err "Please define the target password: export DEPLOY_GCORE_CDN_PASSWORD=password"
  39. return 1
  40. fi
  41. else
  42. Le_Deploy_gcore_cdn_password="$DEPLOY_GCORE_CDN_PASSWORD"
  43. _savedomainconf Le_Deploy_gcore_cdn_password "$Le_Deploy_gcore_cdn_password"
  44. fi
  45. _info "Get authorization token"
  46. _request="{\"username\":\"$Le_Deploy_gcore_cdn_username\",\"password\":\"$Le_Deploy_gcore_cdn_password\"}"
  47. _debug _request "$_request"
  48. export _H1="Content-Type:application/json"
  49. _response=$(_post "$_request" "https://api.gcdn.co/auth/signin")
  50. _debug _response "$_response"
  51. _regex=".*\"token\":\"\([-._0-9A-Za-z]*\)\".*$"
  52. _debug _regex "$_regex"
  53. _token=$(echo "$_response" | sed -n "s/$_regex/\1/p")
  54. _debug _token "$_token"
  55. if [ -z "$_token" ]; then
  56. _err "Error G-Core Labs API authorization"
  57. return 1
  58. fi
  59. _info "Find CDN resource with cname $_cdomain"
  60. export _H2="Authorization:Token $_token"
  61. _response=$(_get "https://api.gcdn.co/resources")
  62. _debug _response "$_response"
  63. _regex=".*(\"id\".*?\"cname\":\"$_cdomain\".*?})"
  64. _regex="^.*\"cname\":\"$_cdomain\".*$"
  65. _debug _regex "$_regex"
  66. _resource=$(echo "$_response" | sed 's/},{/},\n{/g' | _egrep_o "$_regex")
  67. _debug _resource "$_resource"
  68. _regex=".*\"id\":\([0-9]*\),.*$"
  69. _debug _regex "$_regex"
  70. _resourceId=$(echo "$_resource" | sed -n "s/$_regex/\1/p")
  71. _debug _resourceId "$_resourceId"
  72. _regex=".*\"sslData\":\([0-9]*\)}.*$"
  73. _debug _regex "$_regex"
  74. _sslDataOld=$(echo "$_resource" | sed -n "s/$_regex/\1/p")
  75. _debug _sslDataOld "$_sslDataOld"
  76. _regex=".*\"originGroup\":\([0-9]*\),.*$"
  77. _debug _regex "$_regex"
  78. _originGroup=$(echo "$_resource" | sed -n "s/$_regex/\1/p")
  79. _debug _originGroup "$_originGroup"
  80. if [ -z "$_resourceId" ] || [ -z "$_originGroup" ]; then
  81. _err "Not found CDN resource with cname $_cdomain"
  82. return 1
  83. fi
  84. _info "Add new SSL certificate"
  85. _date=$(date "+%d.%m.%Y %H:%M:%S")
  86. _request="{\"name\":\"$_cdomain ($_date)\",\"sslCertificate\":\"$_fullchain\",\"sslPrivateKey\":\"$_key\"}"
  87. _debug _request "$_request"
  88. _response=$(_post "$_request" "https://api.gcdn.co/sslData")
  89. _debug _response "$_response"
  90. _regex=".*\"id\":\([0-9]*\),.*$"
  91. _debug _regex "$_regex"
  92. _sslDataAdd=$(echo "$_response" | sed -n "s/$_regex/\1/p")
  93. _debug _sslDataAdd "$_sslDataAdd"
  94. if [ -z "$_sslDataAdd" ]; then
  95. _err "Error new SSL certificate add"
  96. return 1
  97. fi
  98. _info "Update CDN resource"
  99. _request="{\"originGroup\":$_originGroup,\"sslData\":$_sslDataAdd}"
  100. _debug _request "$_request"
  101. _response=$(_post "$_request" "https://api.gcdn.co/resources/$_resourceId" '' "PUT")
  102. _debug _response "$_response"
  103. _regex=".*\"sslData\":\([0-9]*\)}.*$"
  104. _debug _regex "$_regex"
  105. _sslDataNew=$(echo "$_response" | sed -n "s/$_regex/\1/p")
  106. _debug _sslDataNew "$_sslDataNew"
  107. if [ "$_sslDataNew" != "$_sslDataAdd" ]; then
  108. _err "Error CDN resource update"
  109. return 1
  110. fi
  111. if [ -z "$_sslDataOld" ] || [ "$_sslDataOld" = "null" ]; then
  112. _info "Not found old SSL certificate"
  113. else
  114. _info "Delete old SSL certificate"
  115. _response=$(_post '' "https://api.gcdn.co/sslData/$_sslDataOld" '' "DELETE")
  116. _debug _response "$_response"
  117. fi
  118. _info "Certificate successfully deployed"
  119. return 0
  120. }