From 6c503dab02e32977906856500e3ed12ee0c89fb5 Mon Sep 17 00:00:00 2001 From: Jordan Wiseman Date: Sun, 24 Feb 2019 22:33:50 -0800 Subject: [PATCH] fix format (crlf to lf) --- deploy/dovecot.sh | 224 ++++++++++----------- deploy/postfix.sh | 226 ++++++++++----------- deploy/postfix_and_dovecot.sh | 360 +++++++++++++++++----------------- 3 files changed, 405 insertions(+), 405 deletions(-) diff --git a/deploy/dovecot.sh b/deploy/dovecot.sh index 6edc9520..c274ab55 100644 --- a/deploy/dovecot.sh +++ b/deploy/dovecot.sh @@ -1,112 +1,112 @@ -#!/usr/bin/env sh - -#Here is a script to deploy cert to dovecot servers. - -#returns 0 means success, otherwise error. - -#DEFAULT_DOVECOT_RELOAD="service dovecot restart" -#DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" - -######## Public functions ##################### - -#domain keyfile certfile cafile fullchain -dovecot_deploy() { - _cdomain="$1" - _ckey="$2" - _ccert="$3" - _cca="$4" - _cfullchain="$5" - - _debug _cdomain "$_cdomain" - _debug _ckey "$_ckey" - _debug _ccert "$_ccert" - _debug _cca "$_cca" - _debug _cfullchain "$_cfullchain" - - _ssl_path="/etc/acme.sh/dovecot" - if ! mkdir -p "$_ssl_path"; then - _err "Can not create folder:$_ssl_path" - return 1 - fi - - _info "Copying key and cert" - _real_key="$_ssl_path/dovecot.key" - if ! cat "$_ckey" >"$_real_key"; then - _err "Error: write key file to: $_real_key" - return 1 - fi - _real_fullchain="$_ssl_path/dovecot.chain.pem" - if ! cat "$_cfullchain" >"$_real_fullchain"; then - _err "Error: write key file to: $_real_fullchain" - return 1 - fi - - DEFAULT_DOVECOT_RELOAD="service dovecot restart" - _reload_dovecot="${DEPLOY_DOVECOT_RELOAD:-$DEFAULT_DOVECOT_RELOAD}" - - if [ -z "$IS_RENEW" ]; then - DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" - _dovecot_conf="${DEPLOY_DOVECOT_CONF:-$DEFAULT_DOVECOT_CONF}" - - if [ ! -f "$_dovecot_conf" ]; then - if [ -z "$DEPLOY_DOVECOT_CONF" ]; then - _err "dovecot conf is not found, please define DEPLOY_DOVECOT_CONF" - return 1 - else - _err "It seems that the specified dovecot conf is not valid, please check." - return 1 - fi - fi - if [ ! -w "$_dovecot_conf" ]; then - _err "The file $_dovecot_conf is not writable, please change the permission." - return 1 - fi - _backup_dovecot_conf="$DOMAIN_BACKUP_PATH/dovecot.conf.bak" - _info "Backup $_dovecot_conf to $_backup_dovecot_conf" - cp "$_dovecot_conf" "$_backup_dovecot_conf" - - # dovecot needs the input redirectors ("<") before the filenames here - _info "Modify dovecot conf: $_dovecot_conf" - if _setopt "$_dovecot_conf" "ssl_cert" "=" "<$_real_fullchain" \ - && _setopt "$_dovecot_conf" "ssl_key" "=" "<$_real_key" \ - && _setopt "$_dovecot_conf" "ssl" "=" "required"; then - _info "Set config success!" - else - _err "Config dovecot server error, please report bug to us." - _info "Restoring dovecot conf" - if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then - _info "Restore conf success" - eval "$_reload_dovecot" - else - _err "Oops, error restore dovecot conf, please report bug to us." - fi - return 1 - fi - fi - - _info "Run reload: $_reload_dovecot" - if eval "$_reload_dovecot"; then - _info "Reload success!" - if [ "$DEPLOY_DOVECOT_CONF" ]; then - _savedomainconf DEPLOY_DOVECOT_CONF "$DEPLOY_DOVECOT_CONF" - else - _cleardomainconf DEPLOY_DOVECOT_CONF - fi - if [ "$DEPLOY_DOVECOT_RELOAD" ]; then - _savedomainconf DEPLOY_DOVECOT_RELOAD "$DEPLOY_DOVECOT_RELOAD" - else - _cleardomainconf DEPLOY_DOVECOT_RELOAD - fi - return 0 - else - _err "Reload error, restoring conf" - if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then - _info "Restore dovecot conf success" - eval "$_reload_dovecot" - else - _err "Oops, error restoring dovecot conf, please report bug to us." - fi - return 1 - fi - return 0 -} +#!/usr/bin/env sh + +#Here is a script to deploy cert to dovecot servers. + +#returns 0 means success, otherwise error. + +#DEFAULT_DOVECOT_RELOAD="service dovecot restart" +#DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" + +######## Public functions ##################### + +#domain keyfile certfile cafile fullchain +dovecot_deploy() { + _cdomain="$1" + _ckey="$2" + _ccert="$3" + _cca="$4" + _cfullchain="$5" + + _debug _cdomain "$_cdomain" + _debug _ckey "$_ckey" + _debug _ccert "$_ccert" + _debug _cca "$_cca" + _debug _cfullchain "$_cfullchain" + + _ssl_path="/etc/acme.sh/dovecot" + if ! mkdir -p "$_ssl_path"; then + _err "Can not create folder:$_ssl_path" + return 1 + fi + + _info "Copying key and cert" + _real_key="$_ssl_path/dovecot.key" + if ! cat "$_ckey" >"$_real_key"; then + _err "Error: write key file to: $_real_key" + return 1 + fi + _real_fullchain="$_ssl_path/dovecot.chain.pem" + if ! cat "$_cfullchain" >"$_real_fullchain"; then + _err "Error: write key file to: $_real_fullchain" + return 1 + fi + + DEFAULT_DOVECOT_RELOAD="service dovecot restart" + _reload_dovecot="${DEPLOY_DOVECOT_RELOAD:-$DEFAULT_DOVECOT_RELOAD}" + + if [ -z "$IS_RENEW" ]; then + DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" + _dovecot_conf="${DEPLOY_DOVECOT_CONF:-$DEFAULT_DOVECOT_CONF}" + + if [ ! -f "$_dovecot_conf" ]; then + if [ -z "$DEPLOY_DOVECOT_CONF" ]; then + _err "dovecot conf is not found, please define DEPLOY_DOVECOT_CONF" + return 1 + else + _err "It seems that the specified dovecot conf is not valid, please check." + return 1 + fi + fi + if [ ! -w "$_dovecot_conf" ]; then + _err "The file $_dovecot_conf is not writable, please change the permission." + return 1 + fi + _backup_dovecot_conf="$DOMAIN_BACKUP_PATH/dovecot.conf.bak" + _info "Backup $_dovecot_conf to $_backup_dovecot_conf" + cp "$_dovecot_conf" "$_backup_dovecot_conf" + + # dovecot needs the input redirectors ("<") before the filenames here + _info "Modify dovecot conf: $_dovecot_conf" + if _setopt "$_dovecot_conf" "ssl_cert" "=" "<$_real_fullchain" \ + && _setopt "$_dovecot_conf" "ssl_key" "=" "<$_real_key" \ + && _setopt "$_dovecot_conf" "ssl" "=" "required"; then + _info "Set config success!" + else + _err "Config dovecot server error, please report bug to us." + _info "Restoring dovecot conf" + if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then + _info "Restore conf success" + eval "$_reload_dovecot" + else + _err "Oops, error restore dovecot conf, please report bug to us." + fi + return 1 + fi + fi + + _info "Run reload: $_reload_dovecot" + if eval "$_reload_dovecot"; then + _info "Reload success!" + if [ "$DEPLOY_DOVECOT_CONF" ]; then + _savedomainconf DEPLOY_DOVECOT_CONF "$DEPLOY_DOVECOT_CONF" + else + _cleardomainconf DEPLOY_DOVECOT_CONF + fi + if [ "$DEPLOY_DOVECOT_RELOAD" ]; then + _savedomainconf DEPLOY_DOVECOT_RELOAD "$DEPLOY_DOVECOT_RELOAD" + else + _cleardomainconf DEPLOY_DOVECOT_RELOAD + fi + return 0 + else + _err "Reload error, restoring conf" + if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then + _info "Restore dovecot conf success" + eval "$_reload_dovecot" + else + _err "Oops, error restoring dovecot conf, please report bug to us." + fi + return 1 + fi + return 0 +} diff --git a/deploy/postfix.sh b/deploy/postfix.sh index 3a43b107..97d91fd8 100644 --- a/deploy/postfix.sh +++ b/deploy/postfix.sh @@ -1,113 +1,113 @@ -#!/usr/bin/env sh - -#Here is a script to deploy cert to postfix servers. - -#returns 0 means success, otherwise error. - -#DEFAULT_POSTFIX_RELOAD="service postfix restart" -#DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" - - -######## Public functions ##################### - -#domain keyfile certfile cafile fullchain -postfix_deploy() { - _cdomain="$1" - _ckey="$2" - _ccert="$3" - _cca="$4" - _cfullchain="$5" - - _debug _cdomain "$_cdomain" - _debug _ckey "$_ckey" - _debug _ccert "$_ccert" - _debug _cca "$_cca" - _debug _cfullchain "$_cfullchain" - - _ssl_path="/etc/acme.sh/postfix" - if ! mkdir -p "$_ssl_path"; then - _err "Can not create folder:$_ssl_path" - return 1 - fi - - _info "Copying key and cert" - _real_key="$_ssl_path/postfix.key" - if ! cat "$_ckey" >"$_real_key"; then - _err "Error: write key file to: $_real_key" - return 1 - fi - _real_fullchain="$_ssl_path/postfix.chain.pem" - if ! cat "$_cfullchain" >"$_real_fullchain"; then - _err "Error: write key file to: $_real_fullchain" - return 1 - fi - - DEFAULT_POSTFIX_RELOAD="service postfix restart" - _reload_postfix="${DEPLOY_POSTFIX_RELOAD:-$DEFAULT_POSTFIX_RELOAD}" - - if [ -z "$IS_RENEW" ]; then - DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" - _postfix_conf="${DEPLOY_POSTFIX_CONF:-$DEFAULT_POSTFIX_CONF}" - - if [ ! -f "$_postfix_conf" ]; then - if [ -z "$DEPLOY_POSTFIX_CONF" ]; then - _err "postfix conf is not found, please define DEPLOY_POSTFIX_CONF" - return 1 - else - _err "It seems that the specified postfix conf is not valid, please check." - return 1 - fi - fi - if [ ! -w "$_postfix_conf" ]; then - _err "The file $_postfix_conf is not writable, please change the permission." - return 1 - fi - _backup_postfix_conf="$DOMAIN_BACKUP_PATH/postfix.conf.bak" - _info "Backup $_postfix_conf to $_backup_postfix_conf" - cp "$_postfix_conf" "$_backup_postfix_conf" - - _info "Modify postfix conf: $_postfix_conf" - if _setopt "$_postfix_conf" "smtpd_tls_cert_file" "=" "$_real_fullchain" \ - && _setopt "$_postfix_conf" "smtpd_tls_key_file" "=" "$_real_key" \ - && _setopt "$_postfix_conf" "smtpd_use_tls" "=" "yes" \ - && _setopt "$_postfix_conf" "smtpd_tls_security_level" "=" "may"; then - _info "Set config success!" - else - _err "Config postfix server error, please report bug to us." - _info "Restoring postfix conf" - if cat "$_backup_postfix_conf" >"$_postfix_conf"; then - _info "Restore conf success" - eval "$_reload_postfix" - else - _err "Oops, error restore postfix conf, please report bug to us." - fi - return 1 - fi - fi - - _info "Run reload: $_reload_postfix" - if eval "$_reload_postfix"; then - _info "Reload success!" - if [ "$DEPLOY_POSTFIX_CONF" ]; then - _savedomainconf DEPLOY_POSTFIX_CONF "$DEPLOY_POSTFIX_CONF" - else - _cleardomainconf DEPLOY_POSTFIX_CONF - fi - if [ "$DEPLOY_POSTFIX_RELOAD" ]; then - _savedomainconf DEPLOY_POSTFIX_RELOAD "$DEPLOY_POSTFIX_RELOAD" - else - _cleardomainconf DEPLOY_POSTFIX_RELOAD - fi - return 0 - else - _err "Reload error, restoring conf" - if cat "$_backup_postfix_conf" >"$_postfix_conf"; then - _info "Restore postfox conf success" - eval "$_reload_postfix" - else - _err "Oops, error restoring postfix conf, please report bug to us." - fi - return 1 - fi - return 0 -} +#!/usr/bin/env sh + +#Here is a script to deploy cert to postfix servers. + +#returns 0 means success, otherwise error. + +#DEFAULT_POSTFIX_RELOAD="service postfix restart" +#DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" + + +######## Public functions ##################### + +#domain keyfile certfile cafile fullchain +postfix_deploy() { + _cdomain="$1" + _ckey="$2" + _ccert="$3" + _cca="$4" + _cfullchain="$5" + + _debug _cdomain "$_cdomain" + _debug _ckey "$_ckey" + _debug _ccert "$_ccert" + _debug _cca "$_cca" + _debug _cfullchain "$_cfullchain" + + _ssl_path="/etc/acme.sh/postfix" + if ! mkdir -p "$_ssl_path"; then + _err "Can not create folder:$_ssl_path" + return 1 + fi + + _info "Copying key and cert" + _real_key="$_ssl_path/postfix.key" + if ! cat "$_ckey" >"$_real_key"; then + _err "Error: write key file to: $_real_key" + return 1 + fi + _real_fullchain="$_ssl_path/postfix.chain.pem" + if ! cat "$_cfullchain" >"$_real_fullchain"; then + _err "Error: write key file to: $_real_fullchain" + return 1 + fi + + DEFAULT_POSTFIX_RELOAD="service postfix restart" + _reload_postfix="${DEPLOY_POSTFIX_RELOAD:-$DEFAULT_POSTFIX_RELOAD}" + + if [ -z "$IS_RENEW" ]; then + DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" + _postfix_conf="${DEPLOY_POSTFIX_CONF:-$DEFAULT_POSTFIX_CONF}" + + if [ ! -f "$_postfix_conf" ]; then + if [ -z "$DEPLOY_POSTFIX_CONF" ]; then + _err "postfix conf is not found, please define DEPLOY_POSTFIX_CONF" + return 1 + else + _err "It seems that the specified postfix conf is not valid, please check." + return 1 + fi + fi + if [ ! -w "$_postfix_conf" ]; then + _err "The file $_postfix_conf is not writable, please change the permission." + return 1 + fi + _backup_postfix_conf="$DOMAIN_BACKUP_PATH/postfix.conf.bak" + _info "Backup $_postfix_conf to $_backup_postfix_conf" + cp "$_postfix_conf" "$_backup_postfix_conf" + + _info "Modify postfix conf: $_postfix_conf" + if _setopt "$_postfix_conf" "smtpd_tls_cert_file" "=" "$_real_fullchain" \ + && _setopt "$_postfix_conf" "smtpd_tls_key_file" "=" "$_real_key" \ + && _setopt "$_postfix_conf" "smtpd_use_tls" "=" "yes" \ + && _setopt "$_postfix_conf" "smtpd_tls_security_level" "=" "may"; then + _info "Set config success!" + else + _err "Config postfix server error, please report bug to us." + _info "Restoring postfix conf" + if cat "$_backup_postfix_conf" >"$_postfix_conf"; then + _info "Restore conf success" + eval "$_reload_postfix" + else + _err "Oops, error restore postfix conf, please report bug to us." + fi + return 1 + fi + fi + + _info "Run reload: $_reload_postfix" + if eval "$_reload_postfix"; then + _info "Reload success!" + if [ "$DEPLOY_POSTFIX_CONF" ]; then + _savedomainconf DEPLOY_POSTFIX_CONF "$DEPLOY_POSTFIX_CONF" + else + _cleardomainconf DEPLOY_POSTFIX_CONF + fi + if [ "$DEPLOY_POSTFIX_RELOAD" ]; then + _savedomainconf DEPLOY_POSTFIX_RELOAD "$DEPLOY_POSTFIX_RELOAD" + else + _cleardomainconf DEPLOY_POSTFIX_RELOAD + fi + return 0 + else + _err "Reload error, restoring conf" + if cat "$_backup_postfix_conf" >"$_postfix_conf"; then + _info "Restore postfox conf success" + eval "$_reload_postfix" + else + _err "Oops, error restoring postfix conf, please report bug to us." + fi + return 1 + fi + return 0 +} diff --git a/deploy/postfix_and_dovecot.sh b/deploy/postfix_and_dovecot.sh index 435eaa70..49a5b3f8 100644 --- a/deploy/postfix_and_dovecot.sh +++ b/deploy/postfix_and_dovecot.sh @@ -1,180 +1,180 @@ -#!/usr/bin/env sh - -#Here is a script to deploy cert to postfix and dovecot servers, when -#they use the same certificate (e.g., when both are on the same host or -#use the same hostname). - -#returns 0 means success, otherwise error. - -#DEFAULT_POSTFIX_RELOAD="service postfix restart" -#DEFAULT_DOVECOT_RELOAD="service dovecot restart" - -#DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" -#DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" - - -######## Public functions ##################### - -#domain keyfile certfile cafile fullchain -postfix_and_dovecot_deploy() { - _cdomain="$1" - _ckey="$2" - _ccert="$3" - _cca="$4" - _cfullchain="$5" - - _debug _cdomain "$_cdomain" - _debug _ckey "$_ckey" - _debug _ccert "$_ccert" - _debug _cca "$_cca" - _debug _cfullchain "$_cfullchain" - - _ssl_path="/etc/acme.sh/postfix_and_dovecot" - if ! mkdir -p "$_ssl_path"; then - _err "Can not create folder:$_ssl_path" - return 1 - fi - - _info "Copying key and cert" - _real_key="$_ssl_path/postfix_and_dovecot.key" - if ! cat "$_ckey" >"$_real_key"; then - _err "Error: write key file to: $_real_key" - return 1 - fi - _real_fullchain="$_ssl_path/postfix_and_dovecot.chain.pem" - if ! cat "$_cfullchain" >"$_real_fullchain"; then - _err "Error: write key file to: $_real_fullchain" - return 1 - fi - - DEFAULT_POSTFIX_RELOAD="service postfix restart" - _reload_postfix="${DEPLOY_POSTFIX_RELOAD:-$DEFAULT_POSTFIX_RELOAD}" - - DEFAULT_DOVECOT_RELOAD="service dovecot restart" - _reload_dovecot="${DEPLOY_DOVECOT_RELOAD:-$DEFAULT_DOVECOT_RELOAD}" - - if [ -z "$IS_RENEW" ]; then - DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" - DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" - _postfix_conf="${DEPLOY_POSTFIX_CONF:-$DEFAULT_POSTFIX_CONF}" - _dovecot_conf="${DEPLOY_DOVECOT_CONF:-$DEFAULT_DOVECOT_CONF}" - - # postfix first - if [ ! -f "$_postfix_conf" ]; then - if [ -z "$DEPLOY_POSTFIX_CONF" ]; then - _err "postfix conf is not found, please define DEPLOY_POSTFIX_CONF" - return 1 - else - _err "It seems that the specified postfix conf is not valid, please check." - return 1 - fi - fi - if [ ! -w "$_postfix_conf" ]; then - _err "The file $_postfix_conf is not writable, please change the permission." - return 1 - fi - _backup_postfix_conf="$DOMAIN_BACKUP_PATH/postfix.conf.bak" - _info "Backup $_postfix_conf to $_backup_postfix_conf" - cp "$_postfix_conf" "$_backup_postfix_conf" - - _info "Modify postfix conf: $_postfix_conf" - if _setopt "$_postfix_conf" "smtpd_tls_cert_file" "=" "$_real_fullchain" \ - && _setopt "$_postfix_conf" "smtpd_tls_key_file" "=" "$_real_key" \ - && _setopt "$_postfix_conf" "smtpd_use_tls" "=" "yes" \ - && _setopt "$_postfix_conf" "smtpd_tls_security_level" "=" "may"; then - _info "Set config success!" - else - _err "Config postfix server error, please report bug to us." - _info "Restoring postfix conf" - if cat "$_backup_postfix_conf" >"$_postfix_conf"; then - _info "Restore conf success" - eval "$_reload_postfix" - else - _err "Oops, error restore postfix conf, please report bug to us." - fi - return 1 - fi - - # now dovecot - if [ ! -f "$_dovecot_conf" ]; then - if [ -z "$DEPLOY_DOVECOT_CONF" ]; then - _err "dovecot conf is not found, please define DEPLOY_DOVECOT_CONF" - return 1 - else - _err "It seems that the specified dovecot conf is not valid, please check." - return 1 - fi - fi - if [ ! -w "$_dovecot_conf" ]; then - _err "The file $_dovecot_conf is not writable, please change the permission." - return 1 - fi - _backup_dovecot_conf="$DOMAIN_BACKUP_PATH/dovecot.conf.bak" - _info "Backup $_dovecot_conf to $_backup_dovecot_conf" - cp "$_dovecot_conf" "$_backup_dovecot_conf" - - # dovecot needs the input redirectors ("<") before the filenames here - _info "Modify dovecot conf: $_dovecot_conf" - if _setopt "$_dovecot_conf" "ssl_cert" "=" "<$_real_fullchain" \ - && _setopt "$_dovecot_conf" "ssl_key" "=" "<$_real_key" \ - && _setopt "$_dovecot_conf" "ssl" "=" "required"; then - _info "Set config success!" - else - _err "Config dovecot server error, please report bug to us." - _info "Restoring dovecot conf" - if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then - _info "Restore conf success" - eval "$_reload_dovecot" - else - _err "Oops, error restore dovecot conf, please report bug to us." - fi - return 1 - fi - fi - - _info "Run reload: $_reload_postfix && $_reload_dovecot" - if eval "$_reload_postfix && $_reload_dovecot"; then - _info "Reload success!" - if [ "$DEPLOY_POSTFIX_CONF" ]; then - _savedomainconf DEPLOY_POSTFIX_CONF "$DEPLOY_POSTFIX_CONF" - else - _cleardomainconf DEPLOY_POSTFIX_CONF - fi - if [ "$DEPLOY_POSTFIX_RELOAD" ]; then - _savedomainconf DEPLOY_POSTFIX_RELOAD "$DEPLOY_POSTFIX_RELOAD" - else - _cleardomainconf DEPLOY_POSTFIX_RELOAD - fi - return 0 - - if [ "$DEPLOY_DOVECOT_CONF" ]; then - _savedomainconf DEPLOY_DOVECOT_CONF "$DEPLOY_DOVECOT_CONF" - else - _cleardomainconf DEPLOY_DOVECOT_CONF - fi - if [ "$DEPLOY_DOVECOT_RELOAD" ]; then - _savedomainconf DEPLOY_DOVECOT_RELOAD "$DEPLOY_DOVECOT_RELOAD" - else - _cleardomainconf DEPLOY_DOVECOT_RELOAD - fi - return 0 - else - _err "Reload error, restoring conf" - if cat "$_backup_postfix_conf" >"$_postfix_conf"; then - _info "Restore postfox conf success" - eval "$_reload_postfix" - else - _err "Oops, error restoring postfix conf, please report bug to us." - fi - return 1 - - if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then - _info "Restore dovecot conf success" - eval "$_reload_dovecot" - else - _err "Oops, error restoring dovecot conf, please report bug to us." - fi - return 1 - fi - return 0 -} +#!/usr/bin/env sh + +#Here is a script to deploy cert to postfix and dovecot servers, when +#they use the same certificate (e.g., when both are on the same host or +#use the same hostname). + +#returns 0 means success, otherwise error. + +#DEFAULT_POSTFIX_RELOAD="service postfix restart" +#DEFAULT_DOVECOT_RELOAD="service dovecot restart" + +#DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" +#DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" + + +######## Public functions ##################### + +#domain keyfile certfile cafile fullchain +postfix_and_dovecot_deploy() { + _cdomain="$1" + _ckey="$2" + _ccert="$3" + _cca="$4" + _cfullchain="$5" + + _debug _cdomain "$_cdomain" + _debug _ckey "$_ckey" + _debug _ccert "$_ccert" + _debug _cca "$_cca" + _debug _cfullchain "$_cfullchain" + + _ssl_path="/etc/acme.sh/postfix_and_dovecot" + if ! mkdir -p "$_ssl_path"; then + _err "Can not create folder:$_ssl_path" + return 1 + fi + + _info "Copying key and cert" + _real_key="$_ssl_path/postfix_and_dovecot.key" + if ! cat "$_ckey" >"$_real_key"; then + _err "Error: write key file to: $_real_key" + return 1 + fi + _real_fullchain="$_ssl_path/postfix_and_dovecot.chain.pem" + if ! cat "$_cfullchain" >"$_real_fullchain"; then + _err "Error: write key file to: $_real_fullchain" + return 1 + fi + + DEFAULT_POSTFIX_RELOAD="service postfix restart" + _reload_postfix="${DEPLOY_POSTFIX_RELOAD:-$DEFAULT_POSTFIX_RELOAD}" + + DEFAULT_DOVECOT_RELOAD="service dovecot restart" + _reload_dovecot="${DEPLOY_DOVECOT_RELOAD:-$DEFAULT_DOVECOT_RELOAD}" + + if [ -z "$IS_RENEW" ]; then + DEFAULT_POSTFIX_CONF="/etc/postfix/main.cf" + DEFAULT_DOVECOT_CONF="/etc/dovecot/dovecot.conf" + _postfix_conf="${DEPLOY_POSTFIX_CONF:-$DEFAULT_POSTFIX_CONF}" + _dovecot_conf="${DEPLOY_DOVECOT_CONF:-$DEFAULT_DOVECOT_CONF}" + + # postfix first + if [ ! -f "$_postfix_conf" ]; then + if [ -z "$DEPLOY_POSTFIX_CONF" ]; then + _err "postfix conf is not found, please define DEPLOY_POSTFIX_CONF" + return 1 + else + _err "It seems that the specified postfix conf is not valid, please check." + return 1 + fi + fi + if [ ! -w "$_postfix_conf" ]; then + _err "The file $_postfix_conf is not writable, please change the permission." + return 1 + fi + _backup_postfix_conf="$DOMAIN_BACKUP_PATH/postfix.conf.bak" + _info "Backup $_postfix_conf to $_backup_postfix_conf" + cp "$_postfix_conf" "$_backup_postfix_conf" + + _info "Modify postfix conf: $_postfix_conf" + if _setopt "$_postfix_conf" "smtpd_tls_cert_file" "=" "$_real_fullchain" \ + && _setopt "$_postfix_conf" "smtpd_tls_key_file" "=" "$_real_key" \ + && _setopt "$_postfix_conf" "smtpd_use_tls" "=" "yes" \ + && _setopt "$_postfix_conf" "smtpd_tls_security_level" "=" "may"; then + _info "Set config success!" + else + _err "Config postfix server error, please report bug to us." + _info "Restoring postfix conf" + if cat "$_backup_postfix_conf" >"$_postfix_conf"; then + _info "Restore conf success" + eval "$_reload_postfix" + else + _err "Oops, error restore postfix conf, please report bug to us." + fi + return 1 + fi + + # now dovecot + if [ ! -f "$_dovecot_conf" ]; then + if [ -z "$DEPLOY_DOVECOT_CONF" ]; then + _err "dovecot conf is not found, please define DEPLOY_DOVECOT_CONF" + return 1 + else + _err "It seems that the specified dovecot conf is not valid, please check." + return 1 + fi + fi + if [ ! -w "$_dovecot_conf" ]; then + _err "The file $_dovecot_conf is not writable, please change the permission." + return 1 + fi + _backup_dovecot_conf="$DOMAIN_BACKUP_PATH/dovecot.conf.bak" + _info "Backup $_dovecot_conf to $_backup_dovecot_conf" + cp "$_dovecot_conf" "$_backup_dovecot_conf" + + # dovecot needs the input redirectors ("<") before the filenames here + _info "Modify dovecot conf: $_dovecot_conf" + if _setopt "$_dovecot_conf" "ssl_cert" "=" "<$_real_fullchain" \ + && _setopt "$_dovecot_conf" "ssl_key" "=" "<$_real_key" \ + && _setopt "$_dovecot_conf" "ssl" "=" "required"; then + _info "Set config success!" + else + _err "Config dovecot server error, please report bug to us." + _info "Restoring dovecot conf" + if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then + _info "Restore conf success" + eval "$_reload_dovecot" + else + _err "Oops, error restore dovecot conf, please report bug to us." + fi + return 1 + fi + fi + + _info "Run reload: $_reload_postfix && $_reload_dovecot" + if eval "$_reload_postfix && $_reload_dovecot"; then + _info "Reload success!" + if [ "$DEPLOY_POSTFIX_CONF" ]; then + _savedomainconf DEPLOY_POSTFIX_CONF "$DEPLOY_POSTFIX_CONF" + else + _cleardomainconf DEPLOY_POSTFIX_CONF + fi + if [ "$DEPLOY_POSTFIX_RELOAD" ]; then + _savedomainconf DEPLOY_POSTFIX_RELOAD "$DEPLOY_POSTFIX_RELOAD" + else + _cleardomainconf DEPLOY_POSTFIX_RELOAD + fi + return 0 + + if [ "$DEPLOY_DOVECOT_CONF" ]; then + _savedomainconf DEPLOY_DOVECOT_CONF "$DEPLOY_DOVECOT_CONF" + else + _cleardomainconf DEPLOY_DOVECOT_CONF + fi + if [ "$DEPLOY_DOVECOT_RELOAD" ]; then + _savedomainconf DEPLOY_DOVECOT_RELOAD "$DEPLOY_DOVECOT_RELOAD" + else + _cleardomainconf DEPLOY_DOVECOT_RELOAD + fi + return 0 + else + _err "Reload error, restoring conf" + if cat "$_backup_postfix_conf" >"$_postfix_conf"; then + _info "Restore postfox conf success" + eval "$_reload_postfix" + else + _err "Oops, error restoring postfix conf, please report bug to us." + fi + return 1 + + if cat "$_backup_dovecot_conf" >"$_dovecot_conf"; then + _info "Restore dovecot conf success" + eval "$_reload_dovecot" + else + _err "Oops, error restoring dovecot conf, please report bug to us." + fi + return 1 + fi + return 0 +}