mirror of
https://github.com/outbackdingo/labca.git
synced 2026-01-27 10:19:34 +00:00
6d72d32398
Replace openssl certificate / CRL generation with the tool as used by Let's Encrypt, storing the keys on SoftHSMv2, a simulated HSM (Hardware Security Module). Include migration of old setups where key files were also stored on disk.
18 lines
444 B
Bash
Executable File
18 lines
444 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -e
|
|
|
|
RENEW=30
|
|
TODAY=`date '+%Y_%m_%d'`
|
|
|
|
echo "Running cron-$(basename $0) for ${TODAY}..."
|
|
|
|
if ! expires=`openssl x509 -checkend $[ 86400 * $RENEW ] -noout -in /etc/nginx/ssl/labca_cert.pem`; then
|
|
echo " renewing!"
|
|
cp -p /etc/nginx/ssl/labca_cert.pem /etc/nginx/ssl/labca_cert_$TODAY.pem
|
|
/opt/labca/renew
|
|
fi
|
|
|
|
cd /opt/labca/gui
|
|
/opt/labca/bin/labca-gui -config /opt/labca/data/config.json -renewcrl $RENEW
|