mirror/docker-letsencrypt-nginx-proxy-companion
1
0
Fork 0
mirror of https://github.com/nginx-proxy/docker-letsencrypt-nginx-proxy-companion synced 2024-09-26 22:10:55 +02:00
Code Issues Releases Activity

Fixed path to certfile, added debug echos (#380)

Browse Source 
Fixed path to certfile
Added debug echos
Enhanced issuer checking algo to fix tests
This commit is contained in:
Dmytro Naumenko 2018-05-26 18:18:59 +03:00 committed by Nicolas Duchon
parent aca144c6ef
commit 8171b8c642
1 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
app/letsencrypt_service
View File

@ -86,22 +86,35 @@ function cleanup_links {
fi
[[ $DEBUG == true ]] && echo "Disabled domains: ${DISABLED_DOMAINS[*]}"
# Remove disabled domains symlinks if present.
# Return 1 if nothing was removed and 0 otherwise.
if [[ ${#DISABLED_DOMAINS[@]} -gt 0 ]]; then
[[ $DEBUG == true ]] && echo "Some domains are disabled. Check them to remove unused symlinks."
for disabled_domain in "${DISABLED_DOMAINS[@]}"; do
certfile="${disabled_domain}.crt"
[[ $DEBUG == true ]] && echo -e -n "\nChecking domain ${disabled_domain}: "
certfile="/etc/nginx/certs/${disabled_domain}.crt"
# If certificate is not letsencrypt, don't ever try to remove it
if [[ -f "${certfile}" ]] && [[ -z $(openssl x509 -noout -issuer -in ${certfile} | grep "Let's Encrypt") ]]; then
continue
fi;
if [[ -f "${certfile}" ]]; then
issuer="$(openssl x509 -noout -issuer -in ${certfile})"
le_regex="Let's Encrypt"
ci_regex="h[a,2]ppy h[a,2]cker fake CA"
if [[ ! "$issuer" =~ $le_regex ]] && [[ ! "$issuer" =~ $ci_regex ]]; then
[[ $DEBUG == true ]] && echo "certificate is not LE. Skipping."
continue
fi
fi
for extension in .crt .key .dhparam.pem .chain.pem; do
file="${disabled_domain}${extension}"
[[ $DEBUG == true ]] && echo -n -e "\nChecking ${file}"
if [[ -n "${file// }" ]] && [[ -L "/etc/nginx/certs/${file}" ]]; then
[[ $DEBUG == true ]] && echo -n " - removing."
rm -f "/etc/nginx/certs/${file}"
fi
done
done
[[ $DEBUG == true ]] && echo -e "\nUnused domains checking is finished."
return 0
else
return 1