dokku-alt/plugins/ssl/commands at drone · rcreasey/dokku-alt · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
#!/bin/bash

source "$(dirname $0)/vars"

case "$1" in
  ssl:generate)
    verify_app_name "$2"
    verify_max_args 2 "$@"

    mkdir -p "$APP_DIR/ssl"

    [[ -f "$APP_DIR/ssl/server.csr" ]] && fail "$APP: CSR is already generated"
    [[ -f "$APP_DIR/ssl/server.key" ]] || openssl genrsa -out "$APP_DIR/ssl/server.key" 2048
    openssl req -out "$APP_DIR/ssl/server.csr" -key "$APP_DIR/ssl/server.key" -new

    cat "$APP_DIR/ssl/server.csr"
    ;;

  ssl:certificate)
    verify_app_name "$2"
    verify_max_args 2 "$@"
    mkdir -p "$APP_DIR/ssl"
    CERTIFICATE=$(cat)
    echo "$CERTIFICATE" | openssl x509 -text -noout
    echo "$CERTIFICATE" > "$APP_DIR/ssl/server.crt"

    [[ ! -f "$APP_DIR/ssl/server.key" ]] || dokku deploy "$APP"
    ;;

  ssl:key)
    verify_app_name "$2"
    verify_max_args 2 "$@"
    mkdir -p "$APP_DIR/ssl"
    KEY=$(cat)
    echo "$KEY" | openssl rsa -check
    echo "$KEY" > "$APP_DIR/ssl/server.key"

    [[ ! -f "$APP_DIR/ssl/server.crt" ]] || dokku deploy "$APP"
    ;;

  ssl:selfsigned)
    verify_app_name "$2"
    verify_max_args 2 "$@"

    mkdir -p "$APP_DIR/ssl"

    [[ -f "$APP_DIR/ssl/server.crt" ]] && fail "$APP: There's certificate already"
    [[ -f "$APP_DIR/ssl/server.key" ]] || openssl genrsa -out "$APP_DIR/ssl/server.key" 2048
    openssl req -new -x509 -key "$APP_DIR/ssl/server.key" -out "$APP_DIR/ssl/server.crt" -days 3650
    dokku deploy "$APP"
    ;;

  ssl:info)
    verify_app_name "$2"
    verify_max_args 2 "$@"

    if [[ -f "$APP_DIR/ssl/server.csr" ]]; then
        openssl x509 -in "$APP_DIR/ssl/server.csr" -text -noout || true
    fi
    if [[ -f "$APP_DIR/ssl/server.crt" ]]; then
        openssl x509 -in "$APP_DIR/ssl/server.crt" -text -noout || true
    fi
    ;;

  ssl:forget)
    verify_app_name "$2"
    verify_max_args 2 "$@"
    rm -f "$APP_DIR/ssl/server.csr" "$APP_DIR/ssl/server.crt" "$APP_DIR/ssl/server.key"
    dokku deploy "$APP"
    ;;

  help)
    cat && cat<<EOF
    ssl:generate <app>      Generate certificate signing request for an APP
    ssl:selfsigned <app>      Generate self-signed certificate an APP
    ssl:certificate <app>   Pipe signed certifcate with all intermediates for an APP
    ssl:key <app>           Pipe private key for an APP
    ssl:info <app>          Show info about certifcate and certificate request
    ssl:forget <app>        Wipes certificate for an APP
EOF
    ;;

  *)
    exit $DOKKU_NOT_IMPLEMENTED_EXIT
    ;;
esac