Brie Bruns 2016-03-08 12:11:20 -07:00
parent 9eb04833ac
commit 3abd8bcb72
1 ha cambiato i file con 7 aggiunte e 7 eliminazioni

Vedi File

@ -50,19 +50,19 @@ echo "Firing up standalone authenticator on TCP port 443 and requesting cert..."
${LEOPTIONS}
if `md5sum -c /etc/letsencrypt/live/${DOMAIN}/cert.pem.md5 %>/dev/null`; then
if `md5sum -c /etc/letsencrypt/live/${DOMAIN}/cert.pem.md5 &>/dev/null`; then
echo "Cert has not changed, not updating controller."
exit 0
else
TEMPFILE=$(mktemp)
echo "Cert has changed, updating controller..."
md5sum /etc/letsencrypt/live/${DOMAIN}/cert.pem > /etc/letsencrypt/live/${DOMAIN}/cert.pem.md5
md5sum /etc/letsencrypt/live/${domains[0]}/cert.pem > /etc/letsencrypt/live/${domains[0}/cert.pem.md5
echo "Using openssl to prepare certificate..."
openssl pkcs12 -export -passout pass:aircontrolenterprise \
-in /etc/letsencrypt/live/${DOMAIN}/cert.pem \
-inkey /etc/letsencrypt/live/${DOMAIN}/privkey.pem \
-in /etc/letsencrypt/live/${domains[0]}/cert.pem \
-inkey /etc/letsencrypt/live/${domains[0]}/privkey.pem \
-out ${TEMPFILE} -name unifi \
-CAfile /etc/letsencrypt/live/${DOMAIN}/chain.pem -caname root
-CAfile /etc/letsencrypt/live/${domains[0]}/chain.pem -caname root
echo "Stopping Unifi controller..."
service unifi stop
echo "Removing existing certificate from Unifi protected keystore..."
@ -79,8 +79,8 @@ else
rm -f ${TEMPFILE}
echo "Importing cert into Unifi database..."
java -jar /usr/lib/unifi/lib/ace.jar import_cert \
/etc/letsencrypt/live/${DOMAIN}/cert.pem \
/etc/letsencrypt/live/${DOMAIN}/chain.pem \
/etc/letsencrypt/live/${domains[0]}/cert.pem \
/etc/letsencrypt/live/${domains[0]}/chain.pem \
${EXTRACERT}
echo "Starting Unifi controller..."
service unifi start