Permalink
Browse files

Merge pull request #1055 from hiskang/deploy/strongswan

Deploy/strongswan
  • Loading branch information...
Neilpang committed Oct 4, 2017
2 parents 814bd7c + c924e7c commit 4ef11596665a065b46b4f7fc65a5dd4d3c28d792
Showing with 37 additions and 0 deletions.
  1. +5 −0 deploy/README.md
  2. +32 −0 deploy/strongswan.sh
View
@@ -111,3 +111,8 @@ After the first deployment, these values will be stored in your $HOME/.acme.sh/a
acme.sh --deploy -d fritzbox.example.com --deploy-hook fritzbox
```
## 9. Deploy the cert to strongswan
```sh
acme.sh --deploy -d ftp.example.com --deploy-hook strongswan
```
View
@@ -0,0 +1,32 @@
#!/usr/bin/env sh
#Here is a sample custom api script.
#This file name is "myapi.sh"
#So, here must be a method myapi_deploy()
#Which will be called by acme.sh to deploy the cert
#returns 0 means success, otherwise error.
######## Public functions #####################
#domain keyfile certfile cafile fullchain
strongswan_deploy() {
_cdomain="$1"
_ckey="$2"
_ccert="$3"
_cca="$4"
_cfullchain="$5"
_debug _cdomain "$_cdomain"
_debug _ckey "$_ckey"
_debug _ccert "$_ccert"
_debug _cca "$_cca"
_debug _cfullchain "$_cfullchain"
cat "$_ckey" >"/etc/ipsec.d/private/$(basename "$_ckey")"
cat "$_ccert" >"/etc/ipsec.d/certs/$(basename "$_ccert")"
cat "$_cca" >"/etc/ipsec.d/cacerts/$(basename "$_cca")"
cat "$_cfullchain" >"/etc/ipsec.d/cacerts/$(basename "$_cfullchain")"
ipsec reload
}

0 comments on commit 4ef1159

Please sign in to comment.