|
@@ -2140,6 +2140,39 @@ _findHook() {
|
|
|
printf "%s" "$d_api"
|
|
|
}
|
|
|
|
|
|
+#domain
|
|
|
+__get_domain_new_authz() {
|
|
|
+ _gdnd="$1"
|
|
|
+ _info "Getting new-authz for domain" "$_gdnd"
|
|
|
+
|
|
|
+ _Max_new_authz_retry_times=5
|
|
|
+ _authz_i=0
|
|
|
+ while [ "$_authz_i" -lt "$_Max_new_authz_retry_times" ] ; do
|
|
|
+ _info "Try new-authz for the $_authz_i time."
|
|
|
+ if ! _send_signed_request "$API/acme/new-authz" "{\"resource\": \"new-authz\", \"identifier\": {\"type\": \"dns\", \"value\": \"$(_idn "$_gdnd")\"}}" ; then
|
|
|
+ _err "Can not get domain new authz."
|
|
|
+ return 1
|
|
|
+ fi
|
|
|
+ if ! _contains "$response" "An error occurred while processing your request" ; then
|
|
|
+ _info "The new-authz request is ok."
|
|
|
+ break
|
|
|
+ fi
|
|
|
+ _authz_i="$(_math "$_authz_i" + 1)"
|
|
|
+ _info "Sleep $_authz_i to retry."
|
|
|
+ _sleep "$_authz_i"
|
|
|
+ done;
|
|
|
+
|
|
|
+ if [ "$_authz_i" = "$_Max_new_authz_retry_times" ] ; then
|
|
|
+ _debug "new-authz retry reach the max $_Max_new_authz_retry_times times."
|
|
|
+ fi
|
|
|
+
|
|
|
+ if [ ! -z "$code" ] && [ ! "$code" = '201' ] ; then
|
|
|
+ _err "new-authz error: $response"
|
|
|
+ return 1
|
|
|
+ fi
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
#webroot, domain domainlist keylength
|
|
|
issue() {
|
|
|
if [ -z "$2" ] ; then
|
|
@@ -2280,33 +2313,7 @@ issue() {
|
|
|
vtype="$VTYPE_TLS"
|
|
|
fi
|
|
|
|
|
|
- _info "Getting new-authz for domain" $d
|
|
|
-
|
|
|
- _Max_new_authz_retry_times=5
|
|
|
- _authz_i=0
|
|
|
- while [ "$_authz_i" -lt "$_Max_new_authz_retry_times" ] ; do
|
|
|
- _info "Try new-authz for the $_authz_i time."
|
|
|
- if ! _send_signed_request "$API/acme/new-authz" "{\"resource\": \"new-authz\", \"identifier\": {\"type\": \"dns\", \"value\": \"$(_idn "$d")\"}}" ; then
|
|
|
- _err "Can not get domain token."
|
|
|
- _clearup
|
|
|
- _on_issue_err
|
|
|
- return 1
|
|
|
- fi
|
|
|
- if ! _contains "$response" "An error occurred while processing your request" ; then
|
|
|
- _info "The new-authz request is ok."
|
|
|
- break
|
|
|
- fi
|
|
|
- _authz_i="$(_math "$_authz_i" + 1)"
|
|
|
- _info "Sleep $_authz_i to retry."
|
|
|
- _sleep "$_authz_i"
|
|
|
- done;
|
|
|
-
|
|
|
- if [ "$_authz_i" = "$_Max_new_authz_retry_times" ] ; then
|
|
|
- _debug "new-authz retry reach the max $_Max_new_authz_retry_times times."
|
|
|
- fi
|
|
|
-
|
|
|
- if [ ! -z "$code" ] && [ ! "$code" = '201' ] ; then
|
|
|
- _err "new-authz error: $response"
|
|
|
+ if ! __get_domain_new_authz "$d" ; then
|
|
|
_clearup
|
|
|
_on_issue_err
|
|
|
return 1
|
|
@@ -3227,8 +3234,10 @@ _deactivate() {
|
|
|
do
|
|
|
_info "Deactivate: $_d_domain"
|
|
|
_d_i="$(_math $_d_i + 1)"
|
|
|
- if ! _send_signed_request "$API/acme/new-authz" "{\"resource\": \"new-authz\", \"identifier\": {\"type\": \"dns\", \"value\": \"$(_idn "$_d_domain")\"}}" ; then
|
|
|
- _err "Can not get domain token."
|
|
|
+
|
|
|
+
|
|
|
+ if ! __get_domain_new_authz "$_d_domain" ; then
|
|
|
+ _err "Can not get domain new authz token."
|
|
|
return 1
|
|
|
fi
|
|
|
|