Skip verification if the account is already verified, take 2

This commit is contained in:
Pedro González Serrano 2016-01-24 13:11:04 +01:00
parent 4d14d2e911
commit 835f8051cd

173
le.sh
View File

@ -629,95 +629,104 @@ issue() {
d=$(echo $ventry | cut -d $sep -f 1) d=$(echo $ventry | cut -d $sep -f 1)
keyauthorization=$(echo $ventry | cut -d $sep -f 2) keyauthorization=$(echo $ventry | cut -d $sep -f 2)
uri=$(echo $ventry | cut -d $sep -f 3) uri=$(echo $ventry | cut -d $sep -f 3)
_info "Verifying:$d"
_debug "d" "$d" # check if domain is already verified for the account
_debug "keyauthorization" "$keyauthorization" _info "Checking if domain is already verified"
_debug "uri" "$uri" if ! _get $uri ; then
removelevel="" _err "$d:Verify pending"
token=""
if [ "$vtype" == "$VTYPE_HTTP" ] ; then _info "Verifying:$d"
if [ "$Le_Webroot" == "no" ] ; then _debug "d" "$d"
_info "Standalone mode server" _debug "keyauthorization" "$keyauthorization"
_startserver "$keyauthorization" & _debug "uri" "$uri"
serverproc="$!" removelevel=""
sleep 2 token=""
_debug serverproc $serverproc if [ "$vtype" == "$VTYPE_HTTP" ] ; then
else if [ "$Le_Webroot" == "no" ] ; then
if [ -z "$wellknown_path" ] ; then _info "Standalone mode server"
wellknown_path="$Le_Webroot/.well-known/acme-challenge" _startserver "$keyauthorization" &
fi serverproc="$!"
_debug wellknown_path "$wellknown_path" sleep 2
_debug serverproc $serverproc
if [ ! -d "$Le_Webroot/.well-known" ] ; then
removelevel='1'
elif [ ! -d "$Le_Webroot/.well-known/acme-challenge" ] ; then
removelevel='2'
else else
removelevel='3' if [ -z "$wellknown_path" ] ; then
wellknown_path="$Le_Webroot/.well-known/acme-challenge"
fi
_debug wellknown_path "$wellknown_path"
if [ ! -d "$Le_Webroot/.well-known" ] ; then
removelevel='1'
elif [ ! -d "$Le_Webroot/.well-known/acme-challenge" ] ; then
removelevel='2'
else
removelevel='3'
fi
token="$(echo -e -n "$keyauthorization" | cut -d '.' -f 1)"
_debug "writing token:$token to $wellknown_path/$token"
mkdir -p "$wellknown_path"
echo -n "$keyauthorization" > "$wellknown_path/$token"
webroot_owner=$(stat -c '%U:%G' $Le_Webroot)
_debug "Changing owner/group of .well-known to $webroot_owner"
chown -R $webroot_owner "$Le_Webroot/.well-known"
fi fi
token="$(echo -e -n "$keyauthorization" | cut -d '.' -f 1)"
_debug "writing token:$token to $wellknown_path/$token"
mkdir -p "$wellknown_path"
echo -n "$keyauthorization" > "$wellknown_path/$token"
webroot_owner=$(stat -c '%U:%G' $Le_Webroot)
_debug "Changing owner/group of .well-known to $webroot_owner"
chown -R $webroot_owner "$Le_Webroot/.well-known"
fi fi
fi
_send_signed_request $uri "{\"resource\": \"challenge\", \"keyAuthorization\": \"$keyauthorization\"}"
_send_signed_request $uri "{\"resource\": \"challenge\", \"keyAuthorization\": \"$keyauthorization\"}"
if [ ! -z "$code" ] && [ ! "$code" == '202' ] ; then
if [ ! -z "$code" ] && [ ! "$code" == '202' ] ; then _err "$d:Challenge error: $resource"
_err "$d:Challenge error: $resource"
_clearupwebbroot "$Le_Webroot" "$removelevel" "$token"
_clearup
return 1
fi
while [ "1" ] ; do
_debug "sleep 5 secs to verify"
sleep 5
_debug "checking"
if ! _get $uri ; then
_err "$d:Verify error:$resource"
_clearupwebbroot "$Le_Webroot" "$removelevel" "$token" _clearupwebbroot "$Le_Webroot" "$removelevel" "$token"
_clearup _clearup
return 1 return 1
fi fi
status=$(echo $response | egrep -o '"status":"[^"]+"' | cut -d : -f 2 | sed 's/"//g') while [ "1" ] ; do
if [ "$status" == "valid" ] ; then _debug "sleep 5 secs to verify"
_info "Success" sleep 5
_stopserver $serverproc _debug "checking"
serverproc=""
_clearupwebbroot "$Le_Webroot" "$removelevel" "$token" if ! _get $uri ; then
break; _err "$d:Verify error:$resource"
fi _clearupwebbroot "$Le_Webroot" "$removelevel" "$token"
_clearup
if [ "$status" == "invalid" ] ; then return 1
error=$(echo $response | egrep -o '"error":{[^}]*}' | grep -o '"detail":"[^"]*"' | cut -d '"' -f 4) fi
_err "$d:Verify error:$error"
_clearupwebbroot "$Le_Webroot" "$removelevel" "$token" status=$(echo $response | egrep -o '"status":"[^"]+"' | cut -d : -f 2 | sed 's/"//g')
_clearup if [ "$status" == "valid" ] ; then
return 1; _info "Success"
fi _stopserver $serverproc
serverproc=""
if [ "$status" == "pending" ] ; then _clearupwebbroot "$Le_Webroot" "$removelevel" "$token"
_info "Pending" break;
else fi
_err "$d:Verify error:$response"
_clearupwebbroot "$Le_Webroot" "$removelevel" "$token" if [ "$status" == "invalid" ] ; then
_clearup error=$(echo $response | egrep -o '"error":{[^}]*}' | grep -o '"detail":"[^"]*"' | cut -d '"' -f 4)
return 1 _err "$d:Verify error:$error"
fi _clearupwebbroot "$Le_Webroot" "$removelevel" "$token"
_clearup
done return 1;
fi
if [ "$status" == "pending" ] ; then
_info "Pending"
else
_err "$d:Verify error:$response"
_clearupwebbroot "$Le_Webroot" "$removelevel" "$token"
_clearup
return 1
fi
done
else
_info "$d:Already verified"
fi
done done
_clearup _clearup