github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-19 04:50:47 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

user notification support

Browse source
This commit is contained in:
Serghey Rodin 2016-11-09 17:46:38 +02:00
commit 47bdaeb1f5
1 changed files with 36 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

51
bin/v-add-letsencrypt-domain
View file

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
# info: adding letsencrypt ssl cetificate for domain # info: adding letsencrypt ssl cetificate for domain
# options: USER DOMAIN [ALIASES] [RESTART] # options: USER DOMAIN [ALIASES] [RESTART] [NOTIFY]
# #
# The function turns on SSL support for a domain. Parameter ssl_dir is a path # The function turns on SSL support for a domain. Parameter ssl_dir is a path
# to directory where 2 or 3 ssl files can be found. Certificate file # to directory where 2 or 3 ssl files can be found. Certificate file
@ -19,6 +19,7 @@ user=$1
domain=$2 domain=$2
aliases=$3 aliases=$3
restart=$4 restart=$4
notify=$5
# Includes # Includes
source $VESTA/func/main.sh source $VESTA/func/main.sh
@ -30,7 +31,7 @@ source $VESTA/conf/vesta.conf
# Verifications # # Verifications #
#----------------------------------------------------------# #----------------------------------------------------------#
check_args '2' "$#" 'USER DOMAIN [ALIASES] [RESTART]' check_args '2' "$#" 'USER DOMAIN [ALIASES] [RESTART] [NOTIFY]'
is_format_valid 'user' 'domain' is_format_valid 'user' 'domain'
is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM' is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
is_system_enabled "$WEB_SSL" 'SSL_SUPPORT' is_system_enabled "$WEB_SSL" 'SSL_SUPPORT'
@ -38,16 +39,23 @@ is_object_valid 'user' 'USER' "$user"
is_object_unsuspended 'user' 'USER' "$user" is_object_unsuspended 'user' 'USER' "$user"
is_object_valid 'web' 'DOMAIN' "$domain" is_object_valid 'web' 'DOMAIN' "$domain"
is_object_unsuspended 'web' 'DOMAIN' "$domain" is_object_unsuspended 'web' 'DOMAIN' "$domain"
is_object_value_empty 'web' 'DOMAIN' "$domain" '$LETSENCRYPT'
get_domain_values 'web'
#----------------------------------------------------------# #----------------------------------------------------------#
# Action # # Action #
#----------------------------------------------------------# #----------------------------------------------------------#
# Parsing domain data
get_domain_values 'web'
# Registering LetsEncrypt user account # Registering LetsEncrypt user account
$BIN/v-add-letsencrypt-user $user $BIN/v-add-letsencrypt-user $user
check_result $? "LE account registration" >/dev/null if [ "$?" -ne 0 ]; then
send_notice "LETSENCRYPT" "Account registration failed"
check_result $E_CONNECT "LE account registration" >/dev/null
fi
# Parsing LetsEncrypt account data
source $USER_DATA/ssl/le.conf source $USER_DATA/ssl/le.conf
email=$EMAIL email=$EMAIL
@ -55,20 +63,29 @@ email=$EMAIL
i=1 i=1
for alias in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do for alias in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
$BIN/v-check-letsencrypt-domain $user $alias $BIN/v-check-letsencrypt-domain $user $alias
check_result $? "LE domain validation" >/dev/null if [ "$?" -ne 0 ]; then
send_notice "LETSENCRYPT" "$alias validation failed"
check_result $E_INVALID "LE domain validation" >/dev/null
fi
# Checking LE limits per account
if [ "$i" -gt 100 ]; then if [ "$i" -gt 100 ]; then
send_notice 'LETSENCRYPT' 'Limit of domains per account is reached'
check_result $E_LIMIT "LE can't sign more than 100 domains" check_result $E_LIMIT "LE can't sign more than 100 domains"
fi fi
i=$((i++)) i=$((i++))
done done
exit
# Generating CSR # Generating CSR
ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "$email" "US" "California" \ ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "$email" "US" "California" \
"San Francisco" "Vesta" "IT" "$aliases" |tail -n1 |awk '{print $2}') "San Francisco" "Vesta" "IT" "$aliases" |tail -n1 |awk '{print $2}')
# Signing CSR # Signing CSR
crt=$($BIN/v-sign-letsencrypt-csr $user $domain $ssl_dir) crt=$($BIN/v-sign-letsencrypt-csr $user $domain $ssl_dir)
check_result $? "$crt" if [ "$?" -ne 0 ]; then
send_notice "LETSENCRYPT" "$alias validation failed"
check_result "$E_INVALID" "LE $domain validation"
fi
echo "$crt" > $ssl_dir/$domain.crt echo "$crt" > $ssl_dir/$domain.crt
# Dowloading CA certificate # Dowloading CA certificate
@ -85,13 +102,15 @@ fi
# Adding SSL # Adding SSL
$BIN/v-delete-web-domain-ssl $user $domain >/dev/null 2>&1 $BIN/v-delete-web-domain-ssl $user $domain >/dev/null 2>&1
$BIN/v-add-web-domain-ssl $user $domain $ssl_dir $BIN/v-add-web-domain-ssl $user $domain $ssl_dir
check_result $? "SSL install" >/dev/null if [ "$?" -ne '0' ]; then
send_notice 'LETSENCRYPT' "$domain certificate installation failed"
if [ -z "$LETSENCRYPT" ]; then check_result $? "SSL install" >/dev/null
add_object_key "web" 'DOMAIN' "$domain" 'LETSENCRYPT' 'FTP_USER'
fi fi
# Updating letsencrypt key # Updating letsencrypt key
if [ -z "$LETSENCRYPT" ]; then
add_object_key "web" 'DOMAIN' "$domain" 'LETSENCRYPT' 'FTP_USER'
fi
update_object_value 'web' 'DOMAIN' "$domain" '$LETSENCRYPT' 'yes' update_object_value 'web' 'DOMAIN' "$domain" '$LETSENCRYPT' 'yes'
@ -100,11 +119,13 @@ update_object_value 'web' 'DOMAIN' "$domain" '$LETSENCRYPT' 'yes'
#----------------------------------------------------------# #----------------------------------------------------------#
# Restarting web # Restarting web
if [ "$restart" != 'no' ]; then $BIN/v-restart-web $restart
$BIN/v-restart-web $restart if [ "$?" -ne 0 ]; then
check_result $? "Web restart failed" >/dev/null send_notice 'LETSENCRYPT' "web server needs to be restarted manually"
fi fi
# Notifying user
send_notice 'LETSENCRYPT' "$domain SSL has been installed successfully"
# Logging # Logging
log_event "$OK" "$ARGUMENTS" log_event "$OK" "$ARGUMENTS"