X-Git-Url: https://git.ralfj.de/lets-encrypt-tiny.git/blobdiff_plain/30c7f72e4969a7ce30e0a76b55b55a0f12abd2be..3d2e3a966b67d16f119f0b212d1c0d0cda7d6f91:/letsencrypt-tiny diff --git a/letsencrypt-tiny b/letsencrypt-tiny index 87fcd41..3b89db7 100755 --- a/letsencrypt-tiny +++ b/letsencrypt-tiny @@ -11,9 +11,9 @@ def readConfig(fname, defSection = 'DEFAULT'): config.read_file(stream) return config -def certfile(name, suff = None): +def certfile(name): global config - return os.path.join(config['dirs']['certs'], name + ".crt" + ('' if suff is None else '+'+suff) ) + return os.path.join(config['dirs']['certs'], name + ".crt" ) def keyfile(name): global config @@ -21,7 +21,7 @@ def keyfile(name): def csrfile(name): global config - return os.path.join(config['dirs']['csrs'], name + ".csr") + return os.path.join(config['dirs']['keys'], name + ".csr.tmp") def make_backup(fname): if os.path.exists(fname): @@ -30,7 +30,7 @@ def make_backup(fname): while True: backupfile = os.path.join(config['dirs']['backups'], backupname + "." + str(i)) if not os.path.exists(backupfile): - os.rename(src = fname, dst = backupfile) + os.rename(fname, backupfile) break elif i >= 100: print("Somehow it's really hard to find a name for the backup file...") @@ -65,21 +65,15 @@ def acme(name, domains): make_backup(certfile(name)) with open(certfile(name), 'wb') as f: f.write(signed_crt) - # append DH params - dhfile = config['DEFAULT'].get('dh-params') - if dhfile is not None: - with open(dhfile, 'rb') as f: - dh = f.read() - with open(certfile(name, 'dh'), 'wb') as f: - f.write(signed_crt) - f.write(dh) + # clean up + os.remove(csrfile(name)) def request_cert(name): global config if not os.path.exists(keyfile(name)): raise Exception("No such key: {}".format(name)) domains = config['DEFAULT']['domains'].split() - print("Obtaining certificate '{}' for domains {}".format(name, ' '.join(domains))) + print("Obtaining certificate '{}' for domains: {}".format(name, ' '.join(domains))) acme(name, domains) def generate_key(name): @@ -108,13 +102,9 @@ def check_staging(): print("Unstaging '{}' to '{}'".format(staging, live)) # unstage the key! make_backup(keyfile(live)) - os.rename(src = keyfile(staging), dst = keyfile(live)) + os.rename(keyfile(staging), keyfile(live)) make_backup(certfile(live)) - os.rename(src = certfile(staging), dst = certfile(live)) - try: - os.rename(src = certfile(staging, 'dh'), dst = certfile(live, 'dh')) - except FileNotFoundError: - pass + os.rename(certfile(staging), certfile(live)) return 2 def auto_renewal():