|
|
@ -85,22 +85,23 @@ routeros_deploy() { |
|
|
|
scp "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key" |
|
|
|
_info "Trying to push cert '$_cfullchain' to router" |
|
|
|
scp "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer" |
|
|
|
DEPLOY_SCRIPT_CMD="/system script add name=\"LE Cert Deploy - $_cdomain\" owner=admin policy=ftp,read,write,password,sensitive |
|
|
|
source=\"## generated by routeros deploy script in acme.sh |
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_0 ] |
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_1 ] |
|
|
|
\ndelay 1 |
|
|
|
\n/certificate import file-name=$_cdomain.cer passphrase=\\\"\\\" |
|
|
|
\n/certificate import file-name=$_cdomain.key passphrase=\\\"\\\" |
|
|
|
\ndelay 1 |
|
|
|
\n/file remove $_cdomain.cer |
|
|
|
\n/file remove $_cdomain.key |
|
|
|
\ndelay 2 |
|
|
|
\n/ip service set www-ssl certificate=$_cdomain.cer_0 |
|
|
|
\n$ROUTER_OS_ADDITIONAL_SERVICES |
|
|
|
\n\" |
|
|
|
" |
|
|
|
# shellcheck disable=SC2029 |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script add name=\"LE Cert Deploy - $_cdomain\" owner=admin policy=\ |
|
|
|
ftp,read,write,password,sensitive source=\"## generated by routeros deploy script in acme.sh \\r\ |
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_0 ]\\r\ |
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_1 ]\\r\ |
|
|
|
\ndelay 1\\r\ |
|
|
|
\n/certificate import file-name=$_cdomain.cer passphrase=\\\"\\\"\\r\ |
|
|
|
\n/certificate import file-name=$_cdomain.key passphrase=\\\"\\\"\\r\ |
|
|
|
\ndelay 1\\r\ |
|
|
|
\n/file remove $_cdomain.cer\\r\ |
|
|
|
\n/file remove $_cdomain.key\\r\ |
|
|
|
\ndelay 2\\r\ |
|
|
|
\n/ip service set www-ssl certificate=$_cdomain.cer_0\\r\ |
|
|
|
\n$ROUTER_OS_ADDITIONAL_SERVICES\\r\ |
|
|
|
\n\" |
|
|
|
" |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "$DEPLOY_SCRIPT_CMD" |
|
|
|
# shellcheck disable=SC2029 |
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script run \"LE Cert Deploy - $_cdomain\"" |
|
|
|
# shellcheck disable=SC2029 |
|
|
|