moepman/acertmgr
1
0
Fork 0
mirror of https://github.com/moepman/acertmgr.git synced 2025-01-01 05:31:51 +01:00
Code Releases Activity

More checks (e.g. for acme_tiny)

Browse Source
This commit is contained in:
Markus 2016-01-11 20:15:31 +01:00
parent 5c58580585
commit 1e745b94ea
2 changed files with 21 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@ -8,6 +8,13 @@ Running ACERTMGR
The main file acertmgr.py is intended to be run regularly (e.g. as daily cron job) as root. The main file acertmgr.py is intended to be run regularly (e.g. as daily cron job) as root.
Requirements
------------
Python (2.7+ and 3.4+ should work)
PyYAML
acme\_tiny (`acme_tiny.py` placed in `/opt/acme/acme_tiny.py`)
Configuration Configuration
------------- -------------

20
acertmgr.py
View File

@ -17,6 +17,7 @@ import yaml
ACME_DIR="/etc/acme/" ACME_DIR="/etc/acme/"
ACME_CONF=ACME_DIR + "acme.conf" ACME_CONF=ACME_DIR + "acme.conf"
ACME_CONFD=ACME_DIR + "domains.d/" ACME_CONFD=ACME_DIR + "domains.d/"
ACME_TINY="/opt/acme/acme_tiny.py"
# @brief check whether existing certificate is still valid or expiring soon # @brief check whether existing certificate is still valid or expiring soon
@ -57,19 +58,26 @@ def cert_isValid(crt_file, ttl_days):
# @param domain string containing the domain name # @param domain string containing the domain name
# @param settings the domain's configuration options # @param settings the domain's configuration options
def cert_get(domain, settings): def cert_get(domain, settings):
print("Getting certificate for %s." % domain)
key_file = ACME_DIR + "server.key" key_file = ACME_DIR + "server.key"
if not os.path.exists(key_file): if not os.path.exists(key_file):
raise "The server key file is missing!" raise "The server key file (%s) is missing!" % key_file
acc_file = ACME_DIR + "account.key"
if not os.path.exists(acc_file):
raise "The account key file (%s) is missing!" % acc_file
csr_file = "/tmp/%s.csr" % domain csr_file = "/tmp/%s.csr" % domain
crt_file = "/tmp/%s.crt" % domain if os.path.lexists(csr_file):
if os.path.lexists(csr_file) or os.path.lexists(crt_file):
raise "A temporary file already exists!" raise "A temporary file already exists!"
print("Getting certificate for %s." % domain) if not os.path.exists(ACME_TINY):
cr = subprocess.check_output(['openssl', 'req', '-new', '-sha256', '-key', key_file, '-out', csr_file, '-subj', '/CN=%s' % domain]) raise "acme_tiny (%s) is missing!" % ACME_TINY
# TODO prepare everything for ACME challanges crt_file = "/tmp/%s.crt" % domain
cr = subprocess.check_output(['openssl', 'req', '-new', '-sha256', '-key', key_file, '-out', csr_file, '-subj', '/CN=%s' % domain])
# TODO run acme_tiny # TODO run acme_tiny
# TODO check if resulting certificate is valid # TODO check if resulting certificate is valid