Mirror
/
acme.sh
mirror of https://github.com/acmesh-official/acme.sh.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

Merge 2e87cff035 into c31db83b26

pull/1821/merge
Mr.L 7 years ago
committed by GitHub
parent
c31db83b26 2e87cff035
commit
f3145c15c2
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 283 additions and 0 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 9
      deploy/README.md
  2. 167
      deploy/ali_slb.sh
  3. 107
      deploy/ali_slb.sh.bk

9
deploy/README.md
View File

@ -296,3 +296,12 @@ You can then deploy the certificate as follows
```sh
acme.sh --deploy -d www.mydomain.com --deploy-hook gitlab
```
## 12. Deploy the cert to Aliyun SLB
modify on https://github.com/Neilpang/acme.sh/tree/6e9ffe94c948017491749a6db6fd45a4e941d204/deploy
```
$ export Ali_Region="cn-hangzhou"
$ export Ali_Api_Key="my-api-key"
$ export Ali_Api_Secret="my-api-secret"
$ acme.sh --deploy -d example.com --deploy-hook ali_slb
```

167
deploy/ali_slb.sh
View File

@ -0,0 +1,167 @@
#!/bin/bash
# Attention:
#This file name is "ali_slb.sh"
#So, here must be a method ali_slb_deploy()
#Which will be called by acme.sh to deploy the cert
#returns 0 means success, otherwise error.
######## Public functions #####################
# 参考: https://github.com/Neilpang/acme.sh/wiki/DNS-API-Dev-Guide
#domain keyfile certfile cafile fullchain
#Ali_SLB_Region="My_SLB_Region"
#Ali_SLB_Access_Id="My_SLB_Access_Id"
#Ali_SLB_Access_Secret="My_SLB_Access_Secret"
Ali_SLB_Domain="https://slb.aliyuncs.com/"
ali_slb_deploy() {
_cdomain="$1"
_ckey="$2"
_ccert="$3"
_cca="$4"
_cfullchain="$5"
_debug _cdomain "$_cdomain"
_debug _ckey "$_ckey"
_debug _ccert "$_ccert"
_debug _cca "$_cca"
_debug _cfullchain "$_cfullchain"
if [ -z "$Ali_SLB_Access_Id" ] || [ -z "$Ali_SLB_Access_Secret" ]; then
Ali_SLB_Access_Id=""
Ali_SLB_Access_Secret=""
_err "You don't specify aliyun api key and secret yet."
return 1
fi
#save the api key and secret to the account conf file.
_saveaccountconf_mutable Ali_SLB_Access_Id "$Ali_SLB_Access_Id"
_saveaccountconf_mutable Ali_SLB_Access_Secret "$Ali_SLB_Access_Secret"
#_ali_regions && _ali_rest "Regions"
_add_slb_ca_query "$_ckey" "$_cfullchain" && _ali_rest "Upload Server Certificate"
#returns 0 means success, otherwise error.
return 0
}
######## Private functions #####################
_ali_rest() {
signature=$(printf "%s" "GET&%2F&$(_ali_urlencode "$query")" | _hmac "sha1" "$(printf "%s" "$Ali_SLB_Access_Secret&" | _hex_dump | tr -d " ")" | _base64)
signature=$(_ali_urlencode "$signature")
url="$Ali_SLB_Domain?$query&Signature=$signature"
if ! response="$(_get "$url" "" 3000)"; then
_err "Error <$1>"
return 1
fi
if [ -z "$2" ]; then
message="$(printf "%s" "$response" | _egrep_o "\"Message\":\"[^\"]*\"" | cut -d : -f 2 | tr -d \")"
if [ -n "$message" ]; then
_err "$message"
return 1
fi
fi
_debug response "$response"
# 上传证书成功, 将证书绑定到监听端口443
_set_slb_server_certificate && _ali_set_slb_server_certificate "Set Server Certificate on port 443"
return 0
}
_ali_set_slb_server_certificate() {
signature=$(printf "%s" "GET&%2F&$(_ali_urlencode "$query")" | _hmac "sha1" "$(printf "%s" "$Ali_SLB_Access_Secret&" | _hex_dump | tr -d " ")" | _base64)
signature=$(_ali_urlencode "$signature")
url="$Ali_SLB_Domain?$query&Signature=$signature"
if ! response="$(_get "$url" "" 3000)"; then
_err "Error <$1>"
return 1
fi
if [ -z "$2" ]; then
message="$(printf "%s" "$response" | _egrep_o "\"Message\":\"[^\"]*\"" | cut -d : -f 2 | tr -d \")"
if [ -n "$message" ]; then
_err "$message"
return 1
fi
fi
_debug response "$response"
return 0
}
_ali_urlencode() {
echo $(php -r "echo str_replace(['+','*','%7E'], ['%20','%2A','~'], urlencode(\"$1\"));")
}
_ali_nonce() {
date +"%s%N"
}
_ali_regions() {
query=''
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&Action=DescribeRegions'
query=$query'&Format=json'
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&SignatureNonce='$(_ali_nonce)
query=$query'&SignatureVersion=1.0'
query=$query'&Timestamp='$(_timestamp)
query=$query'&Version=2014-05-15'
}
#_add_slb_ca_query "$_ckey" "$_cfullchain"
_add_slb_ca_query() {
ca_key=$(_readfile "$1")
ca_cert=$(_readfile "$2")
query=''
query=$query'&Action=UploadServerCertificate'
query=$query'&RegionId='$Ali_SLB_Region
query=$query'&ServerCertificate='$ca_cert
query=$query'&ServerCertificateName='$(_date)
query=$query'&Format=json'
query=$query'&PrivateKey='$ca_key
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&Timestamp='$(_timestamp)
query=$query'&SignatureVersion=1.0'
query=$query'&SignatureNonce='$(_ali_nonce)
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&Version=2014-05-15'
}
#_add_slb_ca_query "$_ckey" "$_cfullchain"
_set_slb_server_certificate() {
ca_key=$(_readfile "$1")
ca_cert=$(_readfile "$2")
query=''
query=$query'&Action=SetLoadBalancerHTTPSListenerAttribute'
query=$query'&RegionId='$Ali_SLB_Region
query=$query'LoadBalancerId=lb-t4nj5vuz8ish9emfk1f20'
query=$query'ListenerPort=443'
query=$query'ServerCertificateId=1231579085529123_15dbf6ff26f_1991415478_2054196746'
query=$query'Bandwidth=-1'
query=$query'StickySession=on'
query=$query'StickySessionType=insert'
query=$query'HealthCheck=on'
query=$query'&Version=2014-05-15'
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&Timestamp='$(_timestamp)
query=$query'&SignatureVersion=1.0'
query=$query'&SignatureNonce='$(_ali_nonce)
}
_readfile() {
echo $(php -r "echo str_replace(['+','*','%7E'], ['%20','%2A','~'], urlencode(file_get_contents(\"$1\")));")
}
_timestamp() {
date -u +"%Y-%m-%dT%H%%3A%M%%3A%SZ"
}
_date() {
date -u +"%Y%m%d"
}

107
deploy/ali_slb.sh.bk
View File

@ -0,0 +1,107 @@
#!/bin/bash
######## Public functions #####################
# 参考: https://github.com/Neilpang/acme.sh/wiki/DNS-API-Dev-Guide
#domain keyfile certfile cafile fullchain
#Ali_Region="cn-hangzhou"
#Ali_Api_Key=""
#Ali_Api_Secret=""
Ali_Api="https://slb.aliyuncs.com/"
ali_slb_deploy() {
_cdomain="$1"
_ckey="$2"
_ccert="$3"
_cca="$4"
_cfullchain="$5"
if [ -z "$Ali_Api_Key" ] || [ -z "$Ali_Api_Secret" ]; then
Ali_Api_Key=""
Ali_Api_Secret=""
_err "You don't specify aliyun api key and secret yet."
return 1
fi
#save the api key and secret to the account conf file.
_saveaccountconf Ali_Api_Key "$Ali_Api_Key"
_saveaccountconf Ali_Api_Secret "$Ali_Api_Secret"
#_ali_regions && _ali_rest "Regions"
_add_slb_ca_query "$_ckey" "$_cfullchain" && _ali_rest "Upload Server Certificate"
#returns 0 means success, otherwise error.
return 0
}
######## Private functions #####################
_ali_rest() {
signature=$(printf "%s" "GET&%2F&$(_ali_urlencode "$query")" | _hmac "sha1" "$(printf "%s" "$Ali_Api_Secret&" | _hex_dump | tr -d " ")" | _base64)
signature=$(_ali_urlencode "$signature")
url="$Ali_Api?$query&Signature=$signature"
if ! response="$(_get "$url" "" 3000)"; then
_err "Error <$1>"
return 1
fi
if [ -z "$2" ]; then
message="$(printf "%s" "$response" | _egrep_o "\"Message\":\"[^\"]*\"" | cut -d : -f 2 | tr -d \")"
if [ -n "$message" ]; then
_err "$message"
return 1
fi
fi
_debug response "$response"
return 0
}
_ali_urlencode() {
echo $(php -r "echo str_replace(['+','*','%7E'], ['%20','%2A','~'], urlencode(\"$1\"));")
}
_ali_nonce() {
date +"%s%N"
}
_ali_regions() {
query=''
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&Action=DescribeRegions'
query=$query'&Format=json'
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&SignatureNonce='$(_ali_nonce)
query=$query'&SignatureVersion=1.0'
query=$query'&Timestamp='$(_timestamp)
query=$query'&Version=2014-05-15'
}
#_add_slb_ca_query "$_ckey" "$_cfullchain"
_add_slb_ca_query() {
ca_key=$(_readfile "$1")
ca_cert=$(_readfile "$2")
query=''
query=$query'AccessKeyId='$Ali_Api_Key
query=$query'&Action=UploadServerCertificate'
query=$query'&Format=json'
query=$query'&PrivateKey='$ca_key
query=$query'&RegionId='$Ali_Region
query=$query'&ServerCertificate='$ca_cert
query=$query'&ServerCertificateName='$(_date)
query=$query'&SignatureMethod=HMAC-SHA1'
query=$query'&SignatureNonce='$(_ali_nonce)
query=$query'&SignatureVersion=1.0'
query=$query'&Timestamp='$(_timestamp)
query=$query'&Version=2014-05-15'
}
_readfile() {
echo $(php -r "echo str_replace(['+','*','%7E'], ['%20','%2A','~'], urlencode(file_get_contents(\"$1\")));")
}
_timestamp() {
date -u +"%Y-%m-%dT%H%%3A%M%%3A%SZ"
}
_date() {
date -u +"%Y%m%d"
}
Write Preview
Loading…
Cancel
Save