Differences

This shows you the differences between two versions of the page.

--- letsencrypt [2019/07/24 20:04]
admin
+++ letsencrypt [2022/06/01 12:39] (current)
admin
@@ Line 1: / Line 1: @@
-== new ==
+== new certificate ==
 <code>/usr/bin/certbot --nginx certonly -d yourdomain.com --deploy-hook /usr/local/sbin/push_to_confiared.sh</code>
+== add new for nginx ==
+<code>ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+ssl_ciphers         HIGH:!aNULL:!MD5;
+listen 443 ssl http2;
+listen [::]:443 ssl http2;
+ssl_certificate      /etc/letsencrypt/live/yourdomain.com/fullchain.pem;
+ssl_certificate_key  /etc/letsencrypt/live/yourdomain.com/privkey.pem;</code>
 == renew for apache ==
@@ Line 13: / Line 21: @@
 #!/bin/bash
 #RENEWED_LINEAGE=/etc/letsencrypt/live/site.com
+if [ ! -f ${RENEWED_LINEAGE}/cert.pem ]
+then
+  echo "${RENEWED_LINEAGE}/cert.pem was not found, abort" > /var/log/last_letsencrypt_confiared_api.log
+  echo "${RENEWED_LINEAGE}/cert.pem was not found, abort" >> /var/log/last_letsencrypt_confiared_api.err
+  exit 255
+fi
 /usr/bin/curl --silent --data-urlencode "certificate=`cat ${RENEWED_LINEAGE}/cert.pem`" --data-urlencode "chain=`cat ${RENEWED_LINEAGE}/chain.pem`" --data-urlencode "privatekey=`cat ${RENEWED_LINEAGE}/privkey.pem`" https://api.confiared.com/reverse-proxy/upload-certificate -o /var/log/last_letsencrypt_confiared_api.log
+if [ $? -ne 0 ]
+then
+  # try 99 times
+  for i in {1..99}
+  do
+    sleep 600
+    /usr/bin/curl --silent --data-urlencode "certificate=`cat ${RENEWED_LINEAGE}/cert.pem`" --data-urlencode "chain=`cat ${RENEWED_LINEAGE}/chain.pem`" --data-urlencode "privatekey=`cat ${RENEWED_LINEAGE}/privkey.pem`" https://api.confiared.com/reverse-proxy/upload-certificate -o /var/log/last_letsencrypt_confiared_api.log
+    if [ $? -ne 0 ]
+    then
+      exit 0
+    fi
+  done
+fi
 </code>

Wiki de Confiared

User Tools

Site Tools

Differences

Page Tools