forked from Qortal/qortal
Browse Source
Requires entries 'sslKeystorePathname' and 'sslKeystorePassword' in settings.json. With SSL enabled, API will auto-detect HTTP or HTTPs on the same port. Included tools/build-keystore.sh to help build keystore from Let's Encrypt certificates.split-DB
catbref
4 years ago
3 changed files with 127 additions and 3 deletions
@ -0,0 +1,47 @@ |
|||||||
|
#!/usr/bin/env bash |
||||||
|
|
||||||
|
set -e |
||||||
|
|
||||||
|
# Assumes Let's Encrypt |
||||||
|
|
||||||
|
if [ $# -ne 1 -a $# -ne 3 ]; then |
||||||
|
echo "usage: ${0%%*/} <domain> [<keystore> <password>]" |
||||||
|
exit 2 |
||||||
|
fi |
||||||
|
|
||||||
|
domain=$1 |
||||||
|
keystore=${2:-core-api.keystore} |
||||||
|
pass=${3:-kspassword} |
||||||
|
|
||||||
|
LEdirs=(/usr/local/etc /etc /opt .) |
||||||
|
for LEdir in "${LEdirs[@]}"; do |
||||||
|
srcdir="${LEdir}/letsencrypt/live/${domain}" |
||||||
|
if [ -d "$srcdir" ]; then |
||||||
|
echo "Using certs & keys from ${srcdir}" |
||||||
|
break; |
||||||
|
fi |
||||||
|
unset srcdir |
||||||
|
done |
||||||
|
|
||||||
|
if [ -z "${srcdir}" ]; then |
||||||
|
echo "Can't find Let's Encrypt folder for ${domain}" |
||||||
|
exit |
||||||
|
fi |
||||||
|
|
||||||
|
# key & cert |
||||||
|
rm -f "${domain}.p12" |
||||||
|
openssl pkcs12 \ |
||||||
|
-inkey "${srcdir}/privkey.pem" -in "${srcdir}/fullchain.pem" \ |
||||||
|
-export -out "${domain}.p12" -passout pass:"${pass}" \ |
||||||
|
-name "${domain}" |
||||||
|
|
||||||
|
rm -f "${keystore}" |
||||||
|
keytool -importkeystore -noprompt \ |
||||||
|
-srckeystore "${domain}.p12" -srcstoretype PKCS12 -srcstorepass "${pass}" \ |
||||||
|
-destkeystore "${keystore}" -deststorepass "${pass}" -destkeypass "${pass}" \ |
||||||
|
-alias "${domain}" |
||||||
|
|
||||||
|
printf "Built keystore: ${keystore}, with password: ${pass}\nFor settings.json:\n" |
||||||
|
|
||||||
|
printf "\tsslKeystorePathname: \"%s\",\n" "${keystore}" |
||||||
|
printf "\tsslKeystorePassword: \"%s\",\n" "${pass}" |
Loading…
Reference in new issue