properly concat all domains' certs

This commit is contained in:
Henri Dwyer 2016-09-21 20:55:28 -04:00
parent d49ac4b307
commit 50c94dc81f
1 changed files with 19 additions and 11 deletions

View File

@ -10,18 +10,25 @@ else
http-01" http-01"
fi fi
if $DEBUG
then
args=$args" --debug"
fi
for d in $DOMAINS for d in $DOMAINS
do do
args=$args" -d $d" args=$args" -d $d"
done done
certbot --agree-tos --renew-by-default \ certbot certonly --agree-tos --renew-by-default \
--text --server https://acme-v01.api.letsencrypt.org/directory \ --text --server https://acme-v01.api.letsencrypt.org/directory \
--email $EMAIL certonly $args --email $EMAIL $args
ec=$? ec=$?
echo "certbot exit code $ec" echo "certbot exit code $ec"
if [ $ec -eq 0 ] if [ $ec -eq 0 ]
then then
for d in $DOMAINS
do
if $CONCAT if $CONCAT
then then
# concat the full chain with the private key (e.g. for haproxy) # concat the full chain with the private key (e.g. for haproxy)
@ -31,6 +38,7 @@ then
cp /etc/letsencrypt/live/$d/fullchain.pem /certs/$d.pem cp /etc/letsencrypt/live/$d/fullchain.pem /certs/$d.pem
cp /etc/letsencrypt/live/$d/privkey.pem /certs/$d.key cp /etc/letsencrypt/live/$d/privkey.pem /certs/$d.key
fi fi
done
echo "Success! Your new certificates are in /certs/" echo "Success! Your new certificates are in /certs/"
else else
echo "Cerbot failed. Check the logs for details." echo "Cerbot failed. Check the logs for details."