mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-20 08:27:15 +00:00
Code Issues Releases Activity

security/acme-client: Fall back to letskencrypt periodic vars

Browse Source 
- Add WARNING to pkg-message for rename
  - Fall back to weekly_letskencrypt periodic vars
  - Emit WARNING from periodic when old periodic var is used

Reported by:	feld
This commit is contained in:
Bernard Spil 2016-09-02 10:31:39 +00:00
parent b965eee34d
commit 8c01e9df2a
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=421263
2 changed files with 34 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
security/acme-client/files/000.acme-client.sh.in
View File

@ -9,11 +9,31 @@ fi
PATH=$PATH:%%LOCALBASE%%/bin:%%LOCALBASE%%/sbin
export PATH
case "$weekly_letskencrypt_enable" in
[Yy][Ee][Ss])
echo '!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!'
echo '!! WARNING: letskencrypt has been renamed to acme-client !!'
echo '!! rename all weekly_letskencrypt_* periodic variables !!'
echo '!! to weekly_acme_client_* in your periodic.conf !!'
echo '!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!'
: ${weekly_acme_client_enable:=$weekly_letskencrypt_enable}
: ${weekly_acme_client_renewscript:=$weekly_letskencrypt_renewscript}
: ${weekly_acme_client_domains:=$weekly_letskencrypt_domains}
: ${weekly_acme_client_challengedir:=$weekly_letskencrypt_challengedir}
: ${weekly_acme_client_args:=$weekly_letskencrypt_args}
: ${weekly_acme_client_deployscript:=$weekly_letskencrypt_deployscript}
;;
*)
;;
esac
case "$weekly_acme_client_enable" in
[Yy][Ee][Ss])
echo
echo "Checking Let's Encrypt certificate status:"
: ${weekly_acme_client_args:="-b"}
if [ -x "$weekly_acme_client_renewscript" ] ; then
$weekly_acme_client_renewscript
else

22
security/acme-client/files/pkg-message.in
View File

@ -1,27 +1,33 @@
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! WARNING: letskencrypt has been renamed to acme-client !!
!! rename all weekly_letskencrypt_* periodic variables !!
!! to weekly_acme_client_* in your periodic.conf !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
There are example scripts in
%%PREFIX%%/etc/letsencrypt
that you can for renewing and deploying multiple certificates
%%PREFIX%%/etc/letsencrypt
that you can use for renewing and deploying multiple certificates
In order to run the script regularly to update
the certificates add this line to /etc/periodic.conf
weekly_acme_client_enable="YES"
weekly_acme_client_enable="YES"
Additionally the following parameters can be added to
/etc/periodic.conf (showing default values):
To specify the domain name(s) to include in the certificate
weekly_acme_client_domains="$(hostname -f)"
weekly_acme_client_domains="$(hostname -f)"
To specify the .well-known/acme-challenge directory (full path)
weekly_acme_client_challengedir="/usr/local/www/letsencrypt"
weekly_acme_client_challengedir="%%WWWDIR%%"
To set additional acme-client arguments (see acme-client(1))
weekly_acme_client_args=""
weekly_acme_client_args="-b"
To run a specific script for the renewal (ignore previously set variables)
allows generating/renewing multiple keys/certificates
weekly_acme_client_renewscript=""%%PREFIX%%/etc/letsencrypt/%%PORTNAME%%.sh"
weekly_acme_client_renewscript=""%%PREFIX%%/etc/letsencrypt/%%PORTNAME%%.sh"
To run a script after the renewal to deploy changed certs
weekly_acme_client_deployscript="%%PREFIX%%/etc/letsencrypt/deploy.sh"
weekly_acme_client_deployscript="%%PREFIX%%/etc/letsencrypt/deploy.sh"