config.read_file(stream)
return config
-def certfile(name, suff = None):
+def certfile(name):
global config
- return os.path.join(config['dirs']['certs'], name + ".crt" + ('' if suff is None else '+'+suff) )
+ return os.path.join(config['dirs']['certs'], name + ".crt" )
def keyfile(name):
global config
file.write(csr)
# call acme-tiny as a script
acme_tiny = os.path.join(config['acme']['acme-tiny'], 'acme_tiny.py')
- signed_crt = subprocess.check_output([acme_tiny, "--quiet", "--account-key", config['acme']['account-key'], "--csr", csrfile(name), "--acme-dir", config['acme']['challenge-dir']])
+ signed_crt = subprocess.check_output(["python", acme_tiny, "--quiet", "--account-key", config['acme']['account-key'], "--csr", csrfile(name), "--acme-dir", config['acme']['challenge-dir']])
# save new certificate
make_backup(certfile(name))
with open(certfile(name), 'wb') as f:
f.write(signed_crt)
- # append DH params
- dhfile = config['DEFAULT'].get('dh-params')
- if dhfile is not None:
- with open(dhfile, 'rb') as f:
- dh = f.read()
- with open(certfile(name, 'dh'), 'wb') as f:
- f.write(signed_crt)
- f.write(dh)
def request_cert(name):
global config
if not os.path.exists(keyfile(name)):
raise Exception("No such key: {}".format(name))
domains = config['DEFAULT']['domains'].split()
- print("Obtaining certificate '{}' for domains {}".format(name, ' '.join(domains)))
+ print("Obtaining certificate '{}' for domains: {}".format(name, ' '.join(domains)))
acme(name, domains)
def generate_key(name):
os.rename(src = keyfile(staging), dst = keyfile(live))
make_backup(certfile(live))
os.rename(src = certfile(staging), dst = certfile(live))
- try:
- os.rename(src = certfile(staging, 'dh'), dst = certfile(live, 'dh'))
- except FileNotFoundError:
- pass
return 2
def auto_renewal():