Gondolf
9 months ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
15 additions and
12 deletions
-
deploy/fortigate.sh
|
|
|
@ -32,9 +32,10 @@ parse_response() { |
|
|
|
|
|
|
|
# Function to deploy base64-encoded certificate to firewall |
|
|
|
deployer() { |
|
|
|
cert_base64=$(cat "$_cfullchain" | _base64 | tr -d '\n') |
|
|
|
key_base64=$(cat "$_ckey" | _base64 | tr -d '\n') |
|
|
|
payload=$(cat <<EOF |
|
|
|
cert_base64=$(_base64 <"$_cfullchain" | tr -d '\n') |
|
|
|
key_base64=$(_base64 <"$_ckey" | tr -d '\n') |
|
|
|
payload=$( |
|
|
|
cat <<EOF |
|
|
|
{ |
|
|
|
"type": "regular", |
|
|
|
"scope": "global", |
|
|
|
@ -54,8 +55,9 @@ EOF |
|
|
|
|
|
|
|
# Function to upload CA certificate to firewall (FortiGate doesn't automatically extract CA from fullchain) |
|
|
|
upload_ca_cert() { |
|
|
|
ca_base64=$(cat "$_cca" | _base64 | tr -d '\n') |
|
|
|
payload=$(cat <<EOF |
|
|
|
ca_base64=$(_base64 <"$_cca" | tr -d '\n') |
|
|
|
payload=$( |
|
|
|
cat <<EOF |
|
|
|
{ |
|
|
|
"import_method": "file", |
|
|
|
"scope": "global", |
|
|
|
@ -78,7 +80,8 @@ EOF |
|
|
|
|
|
|
|
# Function to activate the new certificate |
|
|
|
set_active_web_cert() { |
|
|
|
payload=$(cat <<EOF |
|
|
|
payload=$( |
|
|
|
cat <<EOF |
|
|
|
{ |
|
|
|
"admin-server-cert": "$_cdomain" |
|
|
|
} |
|
|
|
|