12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273 |
- #!/usr/bin/env sh
- # Script to create certificate to qiniu.com
- #
- # This deployment required following variables
- # export QINIU_AK="QINIUACCESSKEY"
- # export QINIU_SK="QINIUSECRETKEY"
- QINIU_API_BASE="https://api.qiniu.com"
- qiniu_deploy() {
- _cdomain="$1"
- _ckey="$2"
- _ccert="$3"
- _cca="$4"
- _cfullchain="$5"
- _debug _cdomain "$_cdomain"
- _debug _ckey "$_ckey"
- _debug _ccert "$_ccert"
- _debug _cca "$_cca"
- _debug _cfullchain "$_cfullchain"
- if [ -z "$QINIU_AK" ]; then
- if [ -z "$Le_Deploy_Qiniu_AK" ]; then
- _err "QINIU_AK is not defined."
- return 1
- fi
- else
- Le_Deploy_Qiniu_AK="$QINIU_AK"
- _savedomainconf Le_Deploy_Qiniu_AK "$Le_Deploy_Qiniu_AK"
- fi
- if [ -z "$QINIU_SK" ]; then
- if [ -z "$Le_Deploy_Qiniu_SK" ]; then
- _err "QINIU_SK is not defined."
- return 1
- fi
- else
- Le_Deploy_Qiniu_SK="$QINIU_SK"
- _savedomainconf Le_Deploy_Qiniu_SK "$Le_Deploy_Qiniu_SK"
- fi
- string_fullchain=$(awk '{printf "%s\\n", $0}' "$_cfullchain")
- string_key=$(awk '{printf "%s\\n", $0}' "$_ckey")
- body="{\"name\":\"$_cdomain\",\"common_name\":\"$_cdomain\",\"ca\":\""$string_fullchain"\",\"pri\":\"$string_key\"}"
- create_ssl_url="$QINIU_API_BASE/sslcert"
- ACCESSTOKEN="$(_make_sslcreate_access_token)"
- export _H1="Authorization: QBox $ACCESSTOKEN"
- _response=$(_post "$body" "$create_ssl_url" 0 "POST" "application/json" | _dbase64 "multiline")
- success_response="certID"
- if test "${_response#*$success_response}" == "$_response"; then
- _err "Error in deploying certificate:"
- _err "$_response"
- return 1
- fi
- _debug response "$_response"
- _info "Certificate successfully deployed"
- return 0
- }
- _make_sslcreate_access_token() {
- _data="/sslcert\\n"
- _token="$(printf "$_data" | openssl sha1 -hmac $Le_Deploy_Qiniu_SK -binary | openssl base64 -e)"
- echo "$Le_Deploy_Qiniu_AK:$_token"
- }
|