|
|
@ -85,30 +85,27 @@ routeros_deploy() { |
|
|
|
scp "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key" |
|
|
|
_info "Trying to push cert '$_cfullchain' to router" |
|
|
|
scp "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer" |
|
|
|
DEPLOY_SCRIPT_CMD="/system script add name=\"LE Cert Deploy - $_cdomain\" owner=admin policy=ftp,read,write,password,sensitive |
|
|
|
source=\"## generated by routeros deploy script in acme.sh |
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_0 ] |
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_1 ] |
|
|
|
\ndelay 1 |
|
|
|
\n/certificate import file-name=$_cdomain.cer passphrase=\\\"\\\" |
|
|
|
\n/certificate import file-name=$_cdomain.key passphrase=\\\"\\\" |
|
|
|
\ndelay 1 |
|
|
|
\n/file remove $_cdomain.cer |
|
|
|
\n/file remove $_cdomain.key |
|
|
|
\ndelay 2 |
|
|
|
\n/ip service set www-ssl certificate=$_cdomain.cer_0 |
|
|
|
\n$ROUTER_OS_ADDITIONAL_SERVICES |
|
|
|
\n\" |
|
|
|
" |
|
|
|
# shellcheck disable=SC2029 |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" bash -c "' |
|
|
|
|
|
|
|
/certificate remove $_cdomain.cer_0 |
|
|
|
|
|
|
|
/certificate remove $_cdomain.cer_1 |
|
|
|
|
|
|
|
delay 1 |
|
|
|
|
|
|
|
/certificate import file-name=$_cdomain.cer passphrase=\"\" |
|
|
|
|
|
|
|
/certificate import file-name=$_cdomain.key passphrase=\"\" |
|
|
|
|
|
|
|
delay 1 |
|
|
|
|
|
|
|
/file remove $_cdomain.cer |
|
|
|
|
|
|
|
/file remove $_cdomain.key |
|
|
|
|
|
|
|
delay 2 |
|
|
|
|
|
|
|
/ip service set www-ssl certificate=$_cdomain.cer_0 |
|
|
|
$ROUTER_OS_ADDITIONAL_SERVICES |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "$DEPLOY_SCRIPT_CMD" |
|
|
|
# shellcheck disable=SC2029 |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script run \"LE Cert Deploy - $_cdomain\"" |
|
|
|
# shellcheck disable=SC2029 |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script remove \"LE Cert Deploy - $_cdomain\"" |
|
|
|
|
|
|
|
'" |
|
|
|
return 0 |
|
|
|
} |