You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
87 lines
2.7 KiB
87 lines
2.7 KiB
#!/bin/bash
|
|
|
|
#Here is a script to deploy cert to opengear operations manager.
|
|
|
|
#returns 0 means success, otherwise error.
|
|
|
|
# Note that SSH must be able to login to remote host without a password...
|
|
# The user must have sudo-access without password
|
|
#
|
|
# SSH Keys must have been exchanged with the remote host. Validate and
|
|
# test that you can login to USER@SERVER from the host running acme.sh before
|
|
# using this script.
|
|
|
|
# export OPENGEAR_USER="" # required
|
|
# export OPENGEAR_HOST="om1234" # defaults to domain name
|
|
|
|
Le_Deploy_ssh_cmd="ssh"
|
|
|
|
#domain keyfile certfile cafile fullchain
|
|
opengear_deploy() {
|
|
_cdomain="$1"
|
|
_ckey="$2"
|
|
_ccert="$3"
|
|
_cca="$4"
|
|
_cfullchain="$5"
|
|
|
|
_debug _cdomain "$_cdomain"
|
|
_debug _ckey "$_ckey"
|
|
_debug _ccert "$_ccert"
|
|
_debug _cca "$_cca"
|
|
_debug _cfullchain "$_cfullchain"
|
|
|
|
# OPENGEAR ENV VAR check
|
|
if [ -z "$OPENGEAR_HOST" ]; then
|
|
# HOST is not set in environment, check for saved variable
|
|
_getdeployconf OPENGEAR_HOST
|
|
_opengear_host=$OPENGEAR_HOST
|
|
fi
|
|
if [ -z "$_opengear_host" ]; then
|
|
_info "No host found in saved vars. Defaulting to domain: $_cdomain"
|
|
_opengear_host="$_cdomain"
|
|
fi
|
|
if [ -z "$OPENGEAR_USER" ]; then
|
|
_debug "USER not found in ENV variables lets check for saved variables"
|
|
_getdeployconf OPENGEAR_USER
|
|
_opengear_user=$OPENGEAR_USER
|
|
if [ -z "$_opengear_user" ]; then
|
|
_err "No user found.. If this is the first time deploying please set OPENGEAR_USER in environment variables. Delete them after you have succesfully deployed certs."
|
|
return 1
|
|
else
|
|
_debug "Using saved env variables."
|
|
fi
|
|
else
|
|
_debug "Detected ENV variables to be saved to the deploy conf."
|
|
_opengear_user="$OPENGEAR_USER"
|
|
# Encrypt and save user
|
|
_savedeployconf OPENGEAR_USER "$_opengear_user" 1
|
|
_savedeployconf OPENGEAR_HOST "$_opengear_host" 1
|
|
fi
|
|
_info "Deploying to $_opengear_host"
|
|
|
|
_cmdstr="sudo echo -e \"set services.https.certificate =$(cat "$_cfullchain" | base64 -w0)\nset services.https.private_key =$(cat "$_ckey" | base64 -w0)\npush\" | /usr/unsupported/bin/ogconfig-cli"
|
|
_info "will deploy new certificate"
|
|
if ! _ssh_remote_cmd "$_cmdstr"; then
|
|
return "$_err_code"
|
|
fi
|
|
|
|
return "$_err_code"
|
|
}
|
|
|
|
#cmd
|
|
_ssh_remote_cmd() {
|
|
_cmd="$1"
|
|
_secure_debug "Remote commands to execute: $_cmd"
|
|
_info "Submitting sequence of commands to remote server by ssh"
|
|
# quotations in bash cmd below intended. Squash travis spellcheck error
|
|
# shellcheck disable=SC2029
|
|
_debug $Le_Deploy_ssh_cmd "$_opengear_user@$_opengear_host" sh -c "'$_cmd'"
|
|
$Le_Deploy_ssh_cmd "$_opengear_user@$_opengear_host" sh -c "'$_cmd'"
|
|
_err_code="$?"
|
|
|
|
if [ "$_err_code" != "0" ]; then
|
|
_err "Error code $_err_code returned from ssh"
|
|
fi
|
|
|
|
return $_err_code
|
|
}
|