Commit Graph

23 Commits

Author SHA1 Message Date
8419b42e83 use ${ACME_OPENSSL_BIN:-openssl} instead of openssl
(requested by @Neilpang in #3687)
2021-09-30 19:00:39 -04:00
c43c711f72 use _getdeployconf instead of sourcing DOMAIN_CONF
(requested by @Neilpang in #3394)

github: closes #3394
2021-09-01 16:37:10 -04:00
cf5952f508 fix haproxy deploy hook ocsp update
fixes ocsp reponse update failing with `Responder Error: unauthorized (6)`
by removing `-no_nonce` switch from `openssl oscp` command .
2020-05-02 22:14:21 +02:00
e184a1b9e6 haproxy deploy script now compatible with OpenSSL v1.1+
haproxy deploy script now compatible with OpenSSL v1.1+

The OpenSSL OCSP request for haproxy deployment breaks from OpenSSL v1.1.0 on.
The format of the `-header` option has been changed and does now contain a `=` instead of a whitespace.
Other projects have hit the same issue:
https://github.com/nghttp2/nghttp2/issues/742

This commit determines the OpenSSL/LibreSSL version and then adjusts the request accordingly.
Also removed the duplicate command line and added some more debug output.
2020-02-20 23:28:55 +01:00
1a126b700f fix https://github.com/Neilpang/acme.sh/issues/2252 2019-05-08 22:13:33 +08:00
454c90820d Actually set reload default 2018-09-28 08:57:13 +08:00
31d9ba7e02 Change default for reload 2018-09-28 08:45:18 +08:00
8d348954a7 Whitepspace 2018-05-14 13:22:46 +08:00
7d19d784df Update cert suffix for bundles .ocsp generation 2018-05-14 13:16:56 +08:00
733b4e0a34 Fix Le_Keylength case 2018-05-14 11:26:03 +08:00
08d29a8342 Fix return from reload 2018-05-14 10:58:46 +08:00
ba20af48d3 Support HAPROXY_DEPLOY_PEM_PATH
Adds compatibility to original haproxy deploy hook while still allowing custom PEM file name (via HAPROXY_DEPLOY_PEM_NAME)
2018-05-10 15:25:28 +08:00
707e053949 whitespace fixes 2018-05-10 12:18:03 +08:00
c47e67e52c Fix variable name 2018-05-10 12:06:25 +08:00
6567bb4c12 Update haproxy deploy hook
Add functionality to add OCSP stapling info (.ocsp file), issuer (.issuer file) and multi-cert bundles (suffix on pem file based on key type).

This also corrects the order of key, certificate and intermediate in the PEM file, which although HAProxy does not seem to care, was incorrect in the prior version.
2018-05-10 11:51:59 +08:00
afe5cb588d update for POSIX compliance 2018-05-04 10:25:54 -05:00
e9e999542d add reload 2018-05-04 10:14:31 -05:00
5f593994c7 remove more whitespace (trying to get TravisCI working) 2018-05-03 12:25:11 -05:00
ec73aeba16 remove whitespace 2018-05-03 12:17:26 -05:00
7573e560b6 Add conditional check to ensure path is provided 2018-05-03 10:06:05 -05:00
360dc140ea implement basic haproxy deploy
HAProxy requires the certificate chain and key to be concatenated and placed somewhere (can be anywhere). This script expects a single environment variable with the path where the concatenated PEM file should be written
2018-05-03 01:28:56 -05:00
f845b371ce fix format 2017-02-19 20:40:53 +08:00
3a1bd3114b add hooks, not implemented yet. 2017-02-19 20:35:32 +08:00