yacloud/acme.sh
1
0
Fork 0
mirror of https://github.com/acmesh-official/acme.sh.git synced 2025-05-09 02:42:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
lilj 2017-11-03 14:39:39 +08:00
parent 4c99c0127b
commit 1e8fbe2ba0
2 changed files with 115 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
deploy/README.md
View File

@ -115,4 +115,14 @@ acme.sh --deploy -d fritzbox.example.com --deploy-hook fritzbox
```sh
acme.sh --deploy -d ftp.example.com --deploy-hook strongswan
## 10. Deploy the cert to Aliyun SLB```
WARN, this hook just upload cert to Aliyun SLB, U should signin aliyun console & update slb instance by yourself.
```
$ export Ali_Region="cn-hangzhou"
$ export Ali_Api_Key="my-api-key"
$ export Ali_Api_Secret="my-api-secret"
$ acme.sh --deploy -d example.com --deploy-hook ali_slb
```

105
deploy/ali_slb.sh Normal file
View File

@ -0,0 +1,105 @@
#!/bin/bash
######## Public functions #####################
#domain keyfile certfile cafile fullchain
Ali_Region="cn-hangzhou"
#Ali_Api_Key=""
#Ali_Api_Secret=""
Ali_Api="https://slb.aliyuncs.com/"
ali_slb_deploy() {
_cdomain="$1"
_ckey="$2"
_ccert="$3"
_cca="$4"
_cfullchain="$5"
if [ -z "$Ali_Api_Key" ] || [ -z "$Ali_Api_Secret" ]; then
Ali_Api_Key=""
Ali_Api_Secret=""
_err "You don't specify aliyun api key and secret yet."
return 1
fi
#save the api key and secret to the account conf file.
_saveaccountconf Ali_Api_Key "$Ali_Api_Key"
_saveaccountconf Ali_Api_Secret "$Ali_Api_Secret"
#_ali_regions && _ali_rest "Regions"
_add_slb_ca_query "$_ckey" "$_cfullchain" && _ali_rest "Upload Server Certificate"
#returns 0 means success, otherwise error.
return 0
}
_ali_rest() {
signature=$(printf "%s" "GET&%2F&$(_ali_urlencode "$query")" | _hmac "sha1" "$(printf "%s" "$Ali_Api_Secret&" | _hex_dump | tr -d " ")" | _base64)
signature=$(_ali_urlencode "$signature")
url="$Ali_Api?$query&Signature=$signature"
if ! response="$(_get "$url" "" 3000)"; then
_err "Error <$1>"
return 1
fi
if [ -z "$2" ]; then
message="$(printf "%s" "$response" | _egrep_o "\"Message\":\"[^\"]*\"" | cut -d : -f 2 | tr -d \")"
if [ -n "$message" ]; then
_err "$message"
return 1
fi
fi
_debug response "$response"
return 0
}
_ali_urlencode() {
echo $(php -r "echo str_replace(['+','*','%7E'], ['%20','%2A','~'], urlencode(\"$1\"));")
}
_ali_nonce() {
date +"%s%N"
}
_ali_regions() {
query=''
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&Action=DescribeRegions'
query=$query'&Format=json'
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&SignatureNonce='$(_ali_nonce)
query=$query'&SignatureVersion=1.0'
query=$query'&Timestamp='$(_timestamp)
query=$query'&Version=2014-05-15'
}
#_add_slb_ca_query "$_ckey" "$_cfullchain"
_add_slb_ca_query() {
ca_key=$(_readfile "$1")
ca_cert=$(_readfile "$2")
query=''
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&Action=UploadServerCertificate'
query=$query'&Format=json'
query=$query'&PrivateKey='$ca_key
query=$query'&RegionId='$Ali_Region
query=$query'&ServerCertificate='$ca_cert
query=$query'&ServerCertificateName='$(_date)
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&SignatureNonce='$(_ali_nonce)
query=$query'&SignatureVersion=1.0'
query=$query'&Timestamp='$(_timestamp)
query=$query'&Version=2014-05-15'
}
_readfile() {
echo $(php -r "echo str_replace(['+','*','%7E'], ['%20','%2A','~'], urlencode(file_get_contents(\"$1\")));")
}
_timestamp() {
date -u +"%Y-%m-%dT%H%%3A%M%%3A%SZ"
}
_date() {
date -u +"%Y%m%d"
}