acooler15
4 years ago
1 changed files with 338 additions and 0 deletions
-
338deploy/alicdn.sh
@ -0,0 +1,338 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Script to create certificate to Aliyun CDN |
|||
# |
|||
# This deployment required following variables |
|||
# export ALI_CDN_KEY="LTqIA87hOKdjevsf5" |
|||
# export ALI_CDN_SECRET="0p5EYueFNq501xnCPzKNbx6K51qPH2" |
|||
# export Ali_CDN_DOMAIN="cdn.example.com" |
|||
# If you have more than one domain, just |
|||
# export Ali_CDN_DOMAIN="cdn1.example.com,cdn2.example.com" |
|||
# |
|||
# If ALI_CDN_KEY and ALI_CDN_SECRET are not set, |
|||
# Ali_key and Ali_Secret will be used. (see dns/dns_ali.sh) |
|||
# |
|||
# AliYun Authentication must have "AliyunCDNFullAccess" permission, |
|||
# May also need to "AliyunYundunCertFullAccess" permissions. |
|||
# |
|||
# Thanks: |
|||
# This script references dns/dns_ali.sh and pull request #2772 |
|||
|
|||
######## Public functions ##################### |
|||
Ali_CDN_API="https://cdn.aliyuncs.com/" |
|||
|
|||
alicdn_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
_info "$(__green "===Starting alicdn deploy===")" |
|||
|
|||
_getdeployconf ALI_CDN_KEY |
|||
_getdeployconf ALI_CDN_SECRET |
|||
_getdeployconf Ali_CDN_DOMAIN |
|||
|
|||
if [ -z "${ALI_CDN_KEY}" ] || [ -z "${ALI_CDN_SECRET}" ]; then |
|||
_info "Not set variables ALI_CDN_KEY and ALI_CDN_SECRET" |
|||
_info "Will use Ali_Key and Ali_Secret" |
|||
ALI_CDN_KEY="$(_readaccountconf_mutable Ali_Key)" |
|||
ALI_CDN_SECRET="$(_readaccountconf_mutable Ali_Secret)" |
|||
if [ -z "${ALI_CDN_KEY}" ] || [ -z "${ALI_CDN_SECRET}" ]; then |
|||
_err "You don't specify aliyun api key and secret yet." |
|||
return 1 |
|||
fi |
|||
else |
|||
#save ALI_CDN_KEY and ALI_CDN_SECRET. |
|||
_savedeployconf ALI_CDN_KEY "$ALI_CDN_KEY" |
|||
_savedeployconf ALI_CDN_SECRET "$ALI_CDN_SECRET" |
|||
fi |
|||
|
|||
if [ -z "${Ali_CDN_DOMAIN}" ]; then |
|||
Ali_CDN_DOMAIN="" |
|||
_err "You don't specify Ali_CDN_DOMAIN yet." |
|||
return 1 |
|||
fi |
|||
#save Ali_CDN_DOMAIN. |
|||
_savedeployconf Ali_CDN_DOMAIN "$Ali_CDN_DOMAIN" |
|||
|
|||
_debug ALI_CDN_KEY "${ALI_CDN_KEY}" |
|||
_debug ALI_CDN_SECRET "$ALI_CDN_SECRET" |
|||
_debug Ali_CDN_DOMAIN "$Ali_CDN_DOMAIN" |
|||
|
|||
## upload certificate |
|||
_Ali_SSLPub=$(grep -Ev '^$' "$_cfullchain" | _ali_url_encode) |
|||
_Ali_SSLPri=$(_ali_url_encode <"$_ckey") |
|||
|
|||
query='' |
|||
query=$query'AccessKeyId='${ALI_CDN_KEY} |
|||
query=$query'&Action=BatchSetCdnDomainServerCertificate' |
|||
query=$query'&CertName='$(_ali_urlencode "$_cdomain") |
|||
query=$query'&CertType=upload' |
|||
query=$query'&DomainName='$(_ali_urlencode "$Ali_CDN_DOMAIN") |
|||
query=$query'&ForceSet=1' |
|||
query=$query'&Format=json' |
|||
query=$query'&SSLPri='${_Ali_SSLPri} |
|||
query=$query'&SSLProtocol=on' |
|||
query=$query'&SSLPub='${_Ali_SSLPub} |
|||
query=$query'&SignatureMethod=HMAC-SHA1' |
|||
query=$query'&SignatureNonce='$(_ali_nonce) |
|||
query=$query'&SignatureVersion=1.0' |
|||
query=$query'&Timestamp='$(_timestamp) |
|||
query=$query'&Version=2018-05-10' |
|||
_debug2 signature_source "$(printf "%s" "GET&%2F&$(_ali_urlencode "$query")")" |
|||
signature=$(printf "%s" "GET&%2F&$(_ali_urlencode "$query")" | _hmac "sha1" "$(printf "%s" "$ALI_CDN_SECRET&" | _hex_dump | tr -d " ")" | _base64) |
|||
signature=$(_ali_urlencode "$signature") |
|||
url="$Ali_CDN_API?$query&Signature=$signature" |
|||
|
|||
if ! response="$(_get "$url")"; then |
|||
_err "Error <$1>" |
|||
return 1 |
|||
fi |
|||
_debug response "$response" |
|||
message="$(echo "$response" | _egrep_o "\"Message\":\"[^\"]*\"" | cut -d : -f 2- | tr -d \")" |
|||
if [ "$message" ]; then |
|||
_err "$message" |
|||
return 1 |
|||
fi |
|||
_info "Domain $_cdomain certificate has been deployed successfully" |
|||
_info "$(__green "===End alicdn deploy===")" |
|||
return 0 |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
_ali_url_encode() { |
|||
_hex_str=$(_hex_dump) |
|||
_debug3 "_url_encode" |
|||
_debug3 "_hex_str" "$_hex_str" |
|||
for _hex_code in $_hex_str; do |
|||
#upper case |
|||
case "${_hex_code}" in |
|||
"41") |
|||
printf "%s" "A" |
|||
;; |
|||
"42") |
|||
printf "%s" "B" |
|||
;; |
|||
"43") |
|||
printf "%s" "C" |
|||
;; |
|||
"44") |
|||
printf "%s" "D" |
|||
;; |
|||
"45") |
|||
printf "%s" "E" |
|||
;; |
|||
"46") |
|||
printf "%s" "F" |
|||
;; |
|||
"47") |
|||
printf "%s" "G" |
|||
;; |
|||
"48") |
|||
printf "%s" "H" |
|||
;; |
|||
"49") |
|||
printf "%s" "I" |
|||
;; |
|||
"4a") |
|||
printf "%s" "J" |
|||
;; |
|||
"4b") |
|||
printf "%s" "K" |
|||
;; |
|||
"4c") |
|||
printf "%s" "L" |
|||
;; |
|||
"4d") |
|||
printf "%s" "M" |
|||
;; |
|||
"4e") |
|||
printf "%s" "N" |
|||
;; |
|||
"4f") |
|||
printf "%s" "O" |
|||
;; |
|||
"50") |
|||
printf "%s" "P" |
|||
;; |
|||
"51") |
|||
printf "%s" "Q" |
|||
;; |
|||
"52") |
|||
printf "%s" "R" |
|||
;; |
|||
"53") |
|||
printf "%s" "S" |
|||
;; |
|||
"54") |
|||
printf "%s" "T" |
|||
;; |
|||
"55") |
|||
printf "%s" "U" |
|||
;; |
|||
"56") |
|||
printf "%s" "V" |
|||
;; |
|||
"57") |
|||
printf "%s" "W" |
|||
;; |
|||
"58") |
|||
printf "%s" "X" |
|||
;; |
|||
"59") |
|||
printf "%s" "Y" |
|||
;; |
|||
"5a") |
|||
printf "%s" "Z" |
|||
;; |
|||
|
|||
#lower case |
|||
"61") |
|||
printf "%s" "a" |
|||
;; |
|||
"62") |
|||
printf "%s" "b" |
|||
;; |
|||
"63") |
|||
printf "%s" "c" |
|||
;; |
|||
"64") |
|||
printf "%s" "d" |
|||
;; |
|||
"65") |
|||
printf "%s" "e" |
|||
;; |
|||
"66") |
|||
printf "%s" "f" |
|||
;; |
|||
"67") |
|||
printf "%s" "g" |
|||
;; |
|||
"68") |
|||
printf "%s" "h" |
|||
;; |
|||
"69") |
|||
printf "%s" "i" |
|||
;; |
|||
"6a") |
|||
printf "%s" "j" |
|||
;; |
|||
"6b") |
|||
printf "%s" "k" |
|||
;; |
|||
"6c") |
|||
printf "%s" "l" |
|||
;; |
|||
"6d") |
|||
printf "%s" "m" |
|||
;; |
|||
"6e") |
|||
printf "%s" "n" |
|||
;; |
|||
"6f") |
|||
printf "%s" "o" |
|||
;; |
|||
"70") |
|||
printf "%s" "p" |
|||
;; |
|||
"71") |
|||
printf "%s" "q" |
|||
;; |
|||
"72") |
|||
printf "%s" "r" |
|||
;; |
|||
"73") |
|||
printf "%s" "s" |
|||
;; |
|||
"74") |
|||
printf "%s" "t" |
|||
;; |
|||
"75") |
|||
printf "%s" "u" |
|||
;; |
|||
"76") |
|||
printf "%s" "v" |
|||
;; |
|||
"77") |
|||
printf "%s" "w" |
|||
;; |
|||
"78") |
|||
printf "%s" "x" |
|||
;; |
|||
"79") |
|||
printf "%s" "y" |
|||
;; |
|||
"7a") |
|||
printf "%s" "z" |
|||
;; |
|||
#numbers |
|||
"30") |
|||
printf "%s" "0" |
|||
;; |
|||
"31") |
|||
printf "%s" "1" |
|||
;; |
|||
"32") |
|||
printf "%s" "2" |
|||
;; |
|||
"33") |
|||
printf "%s" "3" |
|||
;; |
|||
"34") |
|||
printf "%s" "4" |
|||
;; |
|||
"35") |
|||
printf "%s" "5" |
|||
;; |
|||
"36") |
|||
printf "%s" "6" |
|||
;; |
|||
"37") |
|||
printf "%s" "7" |
|||
;; |
|||
"38") |
|||
printf "%s" "8" |
|||
;; |
|||
"39") |
|||
printf "%s" "9" |
|||
;; |
|||
"2d") |
|||
printf "%s" "-" |
|||
;; |
|||
"5f") |
|||
printf "%s" "_" |
|||
;; |
|||
"2e") |
|||
printf "%s" "." |
|||
;; |
|||
"7e") |
|||
printf "%s" "~" |
|||
;; |
|||
#other hex |
|||
*) |
|||
printf '%%%s' "$_hex_code" | tr '[:lower:]' '[:upper:]' |
|||
;; |
|||
esac |
|||
done |
|||
} |
|||
|
|||
_ali_urlencode() { |
|||
_str=$(printf "%s" "$1" | _ali_url_encode) |
|||
printf "%s" "$_str" |
|||
} |
|||
|
|||
_ali_nonce() { |
|||
date +"%s%N" |
|||
} |
|||
|
|||
_timestamp() { |
|||
date -u +"%Y-%m-%dT%H%%3A%M%%3A%SZ" |
|||
} |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue