yacloud/acme.sh
1
0
Fork 0
mirror of https://github.com/acmesh-official/acme.sh.git synced 2025-06-16 21:12:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

script should create world-readable verification files

Browse Source 
This closes #32.
This commit is contained in:
Samuel Tardieu 2016-01-23 14:19:08 +01:00
parent de8090f57e
commit 8da4ec8b09
1 changed files with 32 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
le.sh
View File

@ -384,7 +384,34 @@ _clearup () {
_restoreApache _restoreApache
} }
# webroot removelevel tokenfile # webroot removelevel tokenfile
_tokenlevel() {
__path="$1/.well-known"
if [ "$2" != '1' ]; then
__path="$__path/acme-challenge"
if [ "$2" == '3' ]; then
__path="$__path/$3"
elif [ "$2" != '2' ]; then
_err "removelevel invalid: $2"
return 1
fi
fi
echo "$__path"
}
# webroot removelevel tokenfile
_fixtokenperms() {
__path=$(_tokenlevel "$@")
_debug "Setting world-readable permissions on $__path"
chmod -R og=u-w "$__path"
if [ "$EUID" == '0' ]; then
webroot_owner=$(stat -c '%U:%G' "$1")
_debug "Changing owner/group of $__path to $webroot_owner"
chown -R "$webroot_owner" "$__path"
fi
}
# webroot removelevel tokenfile
_clearupwebbroot() { _clearupwebbroot() {
__webroot="$1" __webroot="$1"
if [ -z "$__webroot" ] ; then if [ -z "$__webroot" ] ; then
@ -392,21 +419,9 @@ _clearupwebbroot() {
return 0 return 0
fi fi
if [ "$2" == '1' ] ; then __path=$(_tokenlevel "$@")
_debug "remove $__webroot/.well-known" _debug "remove $__path"
rm -rf "$__webroot/.well-known" rm -rf "$__path"
elif [ "$2" == '2' ] ; then
_debug "remove $__webroot/.well-known/acme-challenge"
rm -rf "$__webroot/.well-known/acme-challenge"
elif [ "$2" == '3' ] ; then
_debug "remove $__webroot/.well-known/acme-challenge/$3"
rm -rf "$__webroot/.well-known/acme-challenge/$3"
else
_info "skip for removelevel:$2"
fi
return 0
} }
issue() { issue() {
@ -652,10 +667,7 @@ issue() {
mkdir -p "$wellknown_path" mkdir -p "$wellknown_path"
echo -n "$keyauthorization" > "$wellknown_path/$token" echo -n "$keyauthorization" > "$wellknown_path/$token"
_fixtokenperms "$Le_Webroot" "$removelevel" "$token"
webroot_owner=$(stat -c '%U:%G' $Le_Webroot)
_debug "Changing owner/group of .well-known to $webroot_owner"
chown -R $webroot_owner "$Le_Webroot/.well-known"
fi fi
fi fi