X-Git-Url: https://git.ralfj.de/lets-encrypt-tiny.git/blobdiff_plain/ce1b6f0b6f4080af953efdcbe154a29d6ea0e3be..5769bd1d33f8301d20c2267bceb70ffe9040206a:/letsencrypt-tiny?ds=sidebyside diff --git a/letsencrypt-tiny b/letsencrypt-tiny index 15aadcb..57a2e60 100755 --- a/letsencrypt-tiny +++ b/letsencrypt-tiny @@ -11,7 +11,7 @@ def readConfig(fname, defSection = 'DEFAULT'): config.read_file(stream) return config -def certfile(name, suff = None): +def certfile(name): global config return os.path.join(config['dirs']['certs'], name + ".crt" + ('' if suff is None else '+'+suff) ) @@ -60,26 +60,18 @@ def acme(name, domains): file.write(csr) # call acme-tiny as a script acme_tiny = os.path.join(config['acme']['acme-tiny'], 'acme_tiny.py') - signed_crt = subprocess.check_output([acme_tiny, "--quiet", "--account-key", config['acme']['account-key'], "--csr", csrfile(name), "--acme-dir", config['acme']['challenge-dir']]) + signed_crt = subprocess.check_output(["python", acme_tiny, "--quiet", "--account-key", config['acme']['account-key'], "--csr", csrfile(name), "--acme-dir", config['acme']['challenge-dir']]) # save new certificate make_backup(certfile(name)) with open(certfile(name), 'wb') as f: f.write(signed_crt) - # append DH params - dhfile = config['DEFAULT'].get('dh-params') - if dhfile is not None: - with open(dhfile, 'rb') as f: - dh = f.read() - with open(certfile(name, 'dh'), 'wb') as f: - f.write(signed_crt) - f.write(dh) def request_cert(name): global config if not os.path.exists(keyfile(name)): raise Exception("No such key: {}".format(name)) domains = config['DEFAULT']['domains'].split() - print("Obtaining certificate '{}' for domains {}".format(name, ' '.join(domains))) + print("Obtaining certificate '{}' for domains: {}".format(name, ' '.join(domains))) acme(name, domains) def generate_key(name): @@ -111,10 +103,6 @@ def check_staging(): os.rename(src = keyfile(staging), dst = keyfile(live)) make_backup(certfile(live)) os.rename(src = certfile(staging), dst = certfile(live)) - try: - os.rename(src = certfile(staging, 'dh'), dst = certfile(live, 'dh')) - except FileNotFoundError: - pass return 2 def auto_renewal():