Browse Source

v2.0.1. Use '--home' install of env

master
neil 9 years ago
parent
commit
a7b7355dcf
  1. 90
      le.sh

90
le.sh

@ -1,11 +1,15 @@
#!/usr/bin/env bash #!/usr/bin/env bash
VER=2.0.0
VER=2.0.1
PROJECT_NAME="le.sh"
PROJECT_ENTRY="le.sh"
PROJECT="https://github.com/Neilpang/le" PROJECT="https://github.com/Neilpang/le"
DEFAULT_CA="https://acme-v01.api.letsencrypt.org" DEFAULT_CA="https://acme-v01.api.letsencrypt.org"
DEFAULT_AGREEMENT="https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf" DEFAULT_AGREEMENT="https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf"
DEFAULT_USER_AGENT="le.sh client: $PROJECT"
DEFAULT_USER_AGENT="$PROJECT_ENTRY client: $PROJECT"
STAGE_CA="https://acme-staging.api.letsencrypt.org" STAGE_CA="https://acme-staging.api.letsencrypt.org"
@ -213,7 +217,7 @@ toPkcs() {
domain="$1" domain="$1"
pfxPassword="$2" pfxPassword="$2"
if [[ -z "$domain" ]] ; then if [[ -z "$domain" ]] ; then
echo "Usage: le.sh --toPkcs -d domain [--password pfx-password]"
echo "Usage: $PROJECT_ENTRY --toPkcs -d domain [--password pfx-password]"
return 1 return 1
fi fi
@ -235,7 +239,7 @@ toPkcs() {
createAccountKey() { createAccountKey() {
_info "Creating account key" _info "Creating account key"
if [[ -z "$1" ]] ; then if [[ -z "$1" ]] ; then
echo Usage: le.sh --createAccountKey -d domain.com [--accountkeylength 2048]
echo Usage: $PROJECT_ENTRY --createAccountKey -d domain.com [--accountkeylength 2048]
return return
fi fi
@ -266,7 +270,7 @@ createAccountKey() {
createDomainKey() { createDomainKey() {
_info "Creating domain key" _info "Creating domain key"
if [[ -z "$1" ]] ; then if [[ -z "$1" ]] ; then
echo Usage: le.sh --createDomainKey -d domain.com [ --keylength 2048 ]
echo Usage: $PROJECT_ENTRY --createDomainKey -d domain.com [ --keylength 2048 ]
return return
fi fi
@ -327,7 +331,7 @@ createDomainKey() {
createCSR() { createCSR() {
_info "Creating csr" _info "Creating csr"
if [[ -z "$1" ]] ; then if [[ -z "$1" ]] ; then
echo Usage: le.sh --createCSR -d domain1.com [-d domain2.com -d domain3.com ... ]
echo Usage: $PROJECT_ENTRY --createCSR -d domain1.com [-d domain2.com -d domain3.com ... ]
return return
fi fi
domain=$1 domain=$1
@ -911,7 +915,7 @@ _clearupwebbroot() {
issue() { issue() {
if [[ -z "$2" ]] ; then if [[ -z "$2" ]] ; then
echo "Usage: le --issue -d a.com -w /path/to/webroot/a.com/ "
echo "Usage: $PROJECT_ENTRY --issue -d a.com -w /path/to/webroot/a.com/ "
return 1 return 1
fi fi
Le_Webroot="$1" Le_Webroot="$1"
@ -1371,7 +1375,7 @@ issue() {
renew() { renew() {
Le_Domain="$1" Le_Domain="$1"
if [[ -z "$Le_Domain" ]] ; then if [[ -z "$Le_Domain" ]] ; then
_err "Usage: le.sh --renew -d domain.com"
_err "Usage: $PROJECT_ENTRY --renew -d domain.com"
return 1 return 1
fi fi
@ -1446,7 +1450,7 @@ renewAll() {
installcert() { installcert() {
Le_Domain="$1" Le_Domain="$1"
if [[ -z "$Le_Domain" ]] ; then if [[ -z "$Le_Domain" ]] ; then
echo "Usage: le.sh --installcert -d domain.com [--certpath cert-file-path] [--keypath key-file-path] [--capath ca-cert-file-path] [ --reloadCmd reloadCmd] [--fullchainpath fullchain-path]"
echo "Usage: $PROJECT_ENTRY --installcert -d domain.com [--certpath cert-file-path] [--keypath key-file-path] [--capath ca-cert-file-path] [ --reloadCmd reloadCmd] [--fullchainpath fullchain-path]"
return 1 return 1
fi fi
@ -1510,24 +1514,24 @@ installcronjob() {
if ! _exists "crontab" ; then if ! _exists "crontab" ; then
_err "crontab doesn't exist, so, we can not install cron jobs." _err "crontab doesn't exist, so, we can not install cron jobs."
_err "All your certs will not be renewed automatically." _err "All your certs will not be renewed automatically."
_err "You must add your own cron job to call 'le.sh cron' everyday."
_err "You must add your own cron job to call '$PROJECT_ENTRY --cron' everyday."
return 1 return 1
fi fi
_info "Installing cron job" _info "Installing cron job"
if ! crontab -l | grep 'le.sh cron' ; then
if [[ -f "$LE_WORKING_DIR/le.sh" ]] ; then
lesh="\"$LE_WORKING_DIR\"/le.sh"
if ! crontab -l | grep "$PROJECT_ENTRY --cron" ; then
if [[ -f "$LE_WORKING_DIR/$PROJECT_ENTRY" ]] ; then
lesh="\"$LE_WORKING_DIR\"/$PROJECT_ENTRY"
else else
_err "Can not install cronjob, le.sh not found."
_err "Can not install cronjob, $PROJECT_ENTRY not found."
return 1 return 1
fi fi
crontab -l | { cat; echo "0 0 * * * LE_WORKING_DIR=\"$LE_WORKING_DIR\" $lesh cron > /dev/null"; } | crontab -
crontab -l | { cat; echo "0 0 * * * $lesh --cron --home \"$LE_WORKING_DIR\" > /dev/null"; } | crontab -
fi fi
if [[ "$?" != "0" ]] ; then if [[ "$?" != "0" ]] ; then
_err "Install cron job failed. You need to manually renew your certs." _err "Install cron job failed. You need to manually renew your certs."
_err "Or you can add cronjob by yourself:" _err "Or you can add cronjob by yourself:"
_err "LE_WORKING_DIR=\"$LE_WORKING_DIR\" $lesh cron > /dev/null"
_err "$lesh --cron --home \"$LE_WORKING_DIR\" > /dev/null"
return 1 return 1
fi fi
} }
@ -1537,20 +1541,20 @@ uninstallcronjob() {
return return
fi fi
_info "Removing cron job" _info "Removing cron job"
cr="$(crontab -l | grep 'le.sh cron')"
cr="$(crontab -l | grep "$PROJECT_ENTRY --cron")"
if [[ "$cr" ]] ; then if [[ "$cr" ]] ; then
crontab -l | sed "/le.sh cron/d" | crontab -
LE_WORKING_DIR="$(echo "$cr" | cut -d ' ' -f 6 | cut -d '=' -f 2 | tr -d '"')"
crontab -l | sed "/$PROJECT_ENTRY --cron/d" | crontab -
LE_WORKING_DIR="$(echo "$cr" | cut -d ' ' -f 9 | tr -d '"')"
_info LE_WORKING_DIR "$LE_WORKING_DIR" _info LE_WORKING_DIR "$LE_WORKING_DIR"
fi fi
_initpath _initpath
} }
revoke() { revoke() {
Le_Domain="$1" Le_Domain="$1"
if [[ -z "$Le_Domain" ]] ; then if [[ -z "$Le_Domain" ]] ; then
echo "Usage: le.sh --revoke -d domain.com"
echo "Usage: $PROJECT_ENTRY --revoke -d domain.com"
return 1 return 1
fi fi
@ -1658,7 +1662,7 @@ _initconf() {
#ACCOUNT_KEY_HASH=account key hash #ACCOUNT_KEY_HASH=account key hash
USER_AGENT=\"le.sh client: $PROJECT\"
USER_AGENT=\"$DEFAULT_USER_AGENT\"
#USER_PATH="" #USER_PATH=""
@ -1698,8 +1702,8 @@ _precheck() {
_err "We need to set cron job to renew the certs automatically." _err "We need to set cron job to renew the certs automatically."
_err "Otherwise, your certs will not be able to be renewed automatically." _err "Otherwise, your certs will not be able to be renewed automatically."
if [[ -z "$FORCE" ]] ; then if [[ -z "$FORCE" ]] ; then
_err "Please define 'FORCE=1' and try install again to go without crontab."
_err "FORCE=1 ./le.sh install"
_err "Please add '--force' and try install again to go without crontab."
_err "./$PROJECT_ENTRY --install --force"
return 1 return 1
fi fi
fi fi
@ -1737,28 +1741,28 @@ install() {
return 1 return 1
fi fi
cp le.sh "$LE_WORKING_DIR/" && chmod +x "$LE_WORKING_DIR/le.sh"
cp $PROJECT_ENTRY "$LE_WORKING_DIR/" && chmod +x "$LE_WORKING_DIR/$PROJECT_ENTRY"
if [[ "$?" != "0" ]] ; then if [[ "$?" != "0" ]] ; then
_err "Install failed, can not copy le.sh"
_err "Install failed, can not copy $PROJECT_ENTRY"
return 1 return 1
fi fi
_info "Installed to $LE_WORKING_DIR/le.sh"
_info "Installed to $LE_WORKING_DIR/$PROJECT_ENTRY"
_profile="$(_detect_profile)" _profile="$(_detect_profile)"
if [[ "$_profile" ]] ; then if [[ "$_profile" ]] ; then
_debug "Found profile: $_profile" _debug "Found profile: $_profile"
echo "LE_WORKING_DIR=$LE_WORKING_DIR echo "LE_WORKING_DIR=$LE_WORKING_DIR
alias le=\"$LE_WORKING_DIR/le.sh\"
alias le.sh=\"$LE_WORKING_DIR/le.sh\"
" > "$LE_WORKING_DIR/le.env"
alias le=\"$LE_WORKING_DIR/$PROJECT_ENTRY\"
alias $PROJECT_ENTRY=\"$LE_WORKING_DIR/$PROJECT_ENTRY\"
" > "$LE_WORKING_DIR/$PROJECT_ENTRY.env"
echo "" >> "$_profile" echo "" >> "$_profile"
_setopt "$_profile" "source \"$LE_WORKING_DIR/le.env\""
_info "OK, Close and reopen your terminal to start using le"
_setopt "$_profile" "source \"$LE_WORKING_DIR/$PROJECT_NAME.env\""
_info "OK, Close and reopen your terminal to start using $PROJECT_NAME"
else else
_info "No profile is found, you will need to go into $LE_WORKING_DIR to use le.sh"
_info "No profile is found, you will need to go into $LE_WORKING_DIR to use $PROJECT_NAME"
fi fi
mkdir -p $LE_WORKING_DIR/dnsapi mkdir -p $LE_WORKING_DIR/dnsapi
@ -1788,10 +1792,10 @@ uninstall() {
_profile="$(_detect_profile)" _profile="$(_detect_profile)"
if [[ "$_profile" ]] ; then if [[ "$_profile" ]] ; then
text="$(cat $_profile)" text="$(cat $_profile)"
echo "$text" | sed "s|^source.*le.env.*$||" > "$_profile"
echo "$text" | sed "s|^source.*$PROJECT_NAME.env.*$||" > "$_profile"
fi fi
rm -f $LE_WORKING_DIR/le.sh
rm -f $LE_WORKING_DIR/$PROJECT_ENTRY
_info "The keys and certs are in $LE_WORKING_DIR, you can remove them by yourself." _info "The keys and certs are in $LE_WORKING_DIR, you can remove them by yourself."
} }
@ -1809,12 +1813,12 @@ version() {
showhelp() { showhelp() {
version version
echo "Usage: le.sh command ...[parameters]....
echo "Usage: $PROJECT_ENTRY command ...[parameters]....
Commands: Commands:
--help, -h Show this help message. --help, -h Show this help message.
--version, -v Show version info. --version, -v Show version info.
--install Install le.sh to your system.
--uninstall Uninstall le.sh, and uninstall the cron job.
--install Install $PROJECT_NAME to your system.
--uninstall Uninstall $PROJECT_NAME, and uninstall the cron job.
--issue Issue a cert. --issue Issue a cert.
--installcert Install the issued cert to apache/nginx or any other server. --installcert Install the issued cert to apache/nginx or any other server.
--renew, -r Renew a cert. --renew, -r Renew a cert.
@ -1852,7 +1856,7 @@ Parameters:
--reloadcmd \"service nginx reload\" After issue/renew, it's used to reload the server. --reloadcmd \"service nginx reload\" After issue/renew, it's used to reload the server.
--accountconf Specifies a customized account config file. --accountconf Specifies a customized account config file.
--leworkingdir Specifies the home dir for le.sh
--home Specifies the home dir for $PROJECT_NAME
" "
} }
@ -1873,8 +1877,8 @@ _installOnline() {
_info "Extracting $localname" _info "Extracting $localname"
tar xzf $localname tar xzf $localname
cd "le-$BRANCH" cd "le-$BRANCH"
chmod +x le.sh
if ./le.sh install ; then
chmod +x $PROJECT_ENTRY
if ./$PROJECT_ENTRY install ; then
_info "Install success!" _info "Install success!"
fi fi
@ -2059,9 +2063,11 @@ _process() {
;; ;;
--accountconf) --accountconf)
ACCOUNT_CONF_PATH="$2" ACCOUNT_CONF_PATH="$2"
shift
;; ;;
--leworkingdir)
--home)
LE_WORKING_DIR="$2" LE_WORKING_DIR="$2"
shift
;; ;;
*) *)

Loading…
Cancel
Save