-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
903ba9b
commit 8c4c1e5
Showing
1 changed file
with
164 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,164 @@ | ||
| trap "exit" INT | ||
|
|
||
| _usage() { | ||
| __red "$@" >&2 | ||
| printf "\n" >&2 | ||
| } | ||
|
|
||
|
|
||
| _exists() { | ||
| cmd="$1" | ||
| if [ -z "$cmd" ]; then | ||
| _usage "Usage: _exists cmd" | ||
| return 1 | ||
| fi | ||
|
|
||
| if eval type type >/dev/null 2>&1; then | ||
| eval type "$cmd" >/dev/null 2>&1 | ||
| elif command >/dev/null 2>&1; then | ||
| command -v "$cmd" >/dev/null 2>&1 | ||
| else | ||
| which "$cmd" >/dev/null 2>&1 | ||
| fi | ||
| ret="$?" | ||
| return $ret | ||
| } | ||
|
|
||
|
|
||
| if ! _exists ~/.acme.sh/acme.sh; then | ||
| curl https://get.acme.sh | sh | ||
| fi | ||
|
|
||
| if ! _exists qingcloud; then | ||
| sudo pip install qingcloud-cli | ||
| fi | ||
|
|
||
| if ! _exists jq; then | ||
| echo "installing jq..." | ||
| if _exists brew; then | ||
| brew install jq | ||
| else | ||
| JQ=/usr/bin/jq | ||
| curl https://stedolan.github.io/jq/download/linux64/jq > $JQ && chmod +x $JQ | ||
| ls -la $JQ | ||
| fi | ||
| fi | ||
|
|
||
| POSITIONAL=() | ||
| while [[ $# -gt 0 ]] | ||
| do | ||
| key="$1" | ||
|
|
||
| case $key in | ||
| -c|--config) | ||
| config_file="$2" | ||
| shift # past argument | ||
| shift # past value | ||
| ;; | ||
| *) # unknown option | ||
| POSITIONAL+=("$1") # save it in an array for later | ||
| shift # past argument | ||
| ;; | ||
| esac | ||
| done | ||
| set -- "${POSITIONAL[@]}" # restore positional parameters | ||
|
|
||
| if [[ -z $config_file ]]; then | ||
| echo "use default config: config.json" | ||
| config_file="config.json" | ||
| else | ||
| echo "use custom config: $config_file" | ||
| fi | ||
|
|
||
| # set dns env | ||
| json=`cat $config_file` | ||
| #echo "$json" | ||
| # set dns env | ||
| `echo $json | jq -r .dns_env_shell` | ||
| dns_type=`echo $json |jq -r .dns_type ` | ||
|
|
||
| for row in $(echo "${json}" | jq -r '.domains[]'); do | ||
| _jq() { | ||
| echo ${row} | ||
| } | ||
| domain=$(_jq '.[0]') | ||
| echo "issue $domain" | ||
| ~/.acme.sh/acme.sh --issue --dns $dns_type -d $domain | ||
| echo "issue $domain success" | ||
| done | ||
|
|
||
| QINGCLOUD_CONFIG=qingcloud_config.yaml | ||
| # delete qingcloud config file | ||
| echo "clear qingcloud config file $QINGCLOUD_CONFIG" | ||
| rm -fr $QINGCLOUD_CONFIG | ||
|
|
||
| qy_access_key_id=`echo $json |jq -r .qy_access_key_id ` | ||
| qy_secret_access_key=`echo $json |jq -r .qy_secret_access_key ` | ||
| zone=`echo $json |jq -r .zone ` | ||
|
|
||
| # create qingcloud config file | ||
| echo "create qingcloud config file $QINGCLOUD_CONFIG" | ||
|
|
||
| echo "qy_access_key_id: '$qy_access_key_id'" >> $QINGCLOUD_CONFIG | ||
| echo "qy_secret_access_key: '$qy_secret_access_key'" >> $QINGCLOUD_CONFIG | ||
| echo "zone: '$zone'" >> $QINGCLOUD_CONFIG | ||
|
|
||
| lb=`echo $json |jq -r .loadbalance_id ` | ||
| lbl=`echo $json |jq -r .loadbalance_listener_id ` | ||
|
|
||
| certificate_id_list="" | ||
|
|
||
| for row in $(echo "${json}" | jq -r '.domains[]'); do | ||
| _jq() { | ||
| echo ${row} | ||
| } | ||
| domain=$(_jq '.[0]') | ||
| echo $domain | ||
| echo "create ssl key for domain $line" | ||
| keyFile=~/.acme.sh/$domain/$domain.key | ||
| fullchainFile=~/.acme.sh/$domain/fullchain.cer | ||
| name=`date +%Y%m%d` | ||
| # create server certificate, remeber id | ||
| response=`qingcloud iaas create-server-certificate -N $domain-$name -C "$fullchainFile" -K "$keyFile" -f $QINGCLOUD_CONFIG` | ||
| echo $response | ||
| certificate_id=`echo $response | jq -r .server_certificate_id` | ||
| certificate_id_list="${certificate_id_list},$certificate_id" | ||
| echo "create ssl key success for $domain" | ||
| done | ||
|
|
||
| certificate_id_list=`echo $certificate_id_list | cut -c 2-` | ||
|
|
||
| old_ssl_id=`qingcloud iaas describe-loadbalancer-listeners -l $lb -s $lbl -f $QINGCLOUD_CONFIG | jq -r '.loadbalancer_listener_set[0].server_certificate_id | join(",")'` | ||
|
|
||
| echo "set server_certificate_id $certificate_id_list to loadbalance $lb with loadbalance listener $lbl" | ||
| ## update loadbalancer listener setting, apply setting | ||
| qingcloud iaas modify-loadbalancer-listener-attributes -s $lbl -S $certificate_id_list -f $QINGCLOUD_CONFIG | ||
| qingcloud iaas update-loadbalancers -l $lb -f $QINGCLOUD_CONFIG | ||
|
|
||
| echo "old ssl id:$old_ssl_id" | ||
| echo "waiting for change..." | ||
| lb_status=`qingcloud iaas describe-loadbalancers -l $lb -f $QINGCLOUD_CONFIG | jq -r '.loadbalancer_set[0].status'` | ||
| timeout=0 | ||
| while true ; do | ||
| timeout=$(($timeout+1)) | ||
| if [ "$timeout" -gt 5 ] | ||
| then | ||
| break | ||
| fi | ||
| echo "loadbalancer status:$lb_status" | ||
| if [ "$lb_status" != "active" ]; then | ||
| sleep 3 | ||
| lb_status=`qingcloud iaas describe-loadbalancers -l $lb -f $QINGCLOUD_CONFIG | jq -r '.loadbalancer_set[0].status'` | ||
| else | ||
| break; | ||
| fi | ||
| done | ||
|
|
||
| echo "delete old ssl id:$old_ssl_id" | ||
| qingcloud iaas delete-server-certificates -s $old_ssl_id -f $QINGCLOUD_CONFIG | ||
|
|
||
| # delete qingcloud config file | ||
| echo "delete qingcloud config file $QINGCLOUD_CONFIG" | ||
| rm -fr $QINGCLOUD_CONFIG | ||
|
|
||
|
|