From a31ae66f74fc092e46e97141f253c840ee79ec9f Mon Sep 17 00:00:00 2001
From: Gerhard Heift <Gerhard@Heift.Name>
Date: Sun, 13 Dec 2015 13:31:08 +0100
Subject: [PATCH] added push script option

Added an option for a script, which will be called to install or remove a
response to a server. The script will have the following arguments:

script action domain token thumbprint

  action      either install or remove, based when the script is called
  domain      the domain for which the response should be added or removed
  token       the token under which the response is expected
  thumbprint  the thumbprint of the account key
---
 letsencrypt.sh | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/letsencrypt.sh b/letsencrypt.sh
index 52695ab..d83b109 100755
--- a/letsencrypt.sh
+++ b/letsencrypt.sh
@@ -96,6 +96,9 @@ DOMAIN_DATA=
 # $DOMAIN or ${DOMAIN} will be replaced with the actual domain
 WEBDIR=
 
+# the script to be called to push the response to a remote server
+PUSH_TOKEN=
+
 QUIET=
 
 # utility functions
@@ -337,7 +340,9 @@ push_domain_response() {
 
     if [ -n "$WEBDIR" ]; then
         TOKEN_DIR="`printf "%s" $WEBDIR | sed -e 's/\$DOMAIN/'"$DOMAIN"'/g; s/${DOMAIN}/'"$DOMAIN"'/g'`"
-        printf "%s\n" "$DOMAIN_RESPONSE" > "$TOKEN_DIR/$DOMAIN_TOKEN" || exit 1
+        printf "%s.%s\n" "$DOMAIN_TOKEN.$ACCOUNT_THUMB" > "$TOKEN_DIR/$DOMAIN_TOKEN" || exit 1
+    elif [ -n "$PUSH_TOKEN" ]; then
+        $PUSH_TOKEN install "$DOMAIN" "$DOMAIN_TOKEN" "$ACCOUNT_THUMB" || die "could not install token for $DOMAIN"
     fi
 
     return
@@ -352,6 +357,8 @@ remove_domain_response() {
     if [ -n "$WEBDIR" ]; then
         TOKEN_DIR="`printf "%s" $WEBDIR | sed -e 's/\$DOMAIN/'"$DOMAIN"'/g; s/${DOMAIN}/'"$DOMAIN"'/g'`"
         rm -f "$TOKEN_DIR/$DOMAIN_TOKEN"
+    elif [ -n "$PUSH_TOKEN" ]; then
+        $PUSH_TOKEN remove "$DOMAIN" "$DOMAIN_TOKEN" "$ACCOUNT_THUMB" || exit 1
     fi
 
     return
@@ -365,8 +372,6 @@ push_response() {
         DOMAIN_TOKEN="$3"
 
         shift 3
-
-        DOMAIN_RESPONSE="$DOMAIN_TOKEN.$ACCOUNT_THUMB"
     
         push_domain_response
     done
@@ -534,6 +539,8 @@ letsencrypt.sh sign -a account_key -r server_csr -c signed_crt
     -w webdir         the directory, where the response should be stored
                       $DOMAIN will be replaced by the actual domain
                       the directory will not be created
+    -P exec           the command to call to install the token on a remote
+                      server
 EOT
 }
 
@@ -562,7 +569,7 @@ case "$ACTION" in
             ?|:) echo "invalid arguments" > /dev/stderr; exit 1;;
         esac; done;;
     sign)
-        while getopts :hqa:k:r:c:w: name; do case "$name" in
+        while getopts :hqa:k:r:c:w:P: name; do case "$name" in
             h) usage; exit 1;;
             q) QUIET=1;;
             a) ACCOUNT_KEY="$OPTARG";;
@@ -584,6 +591,7 @@ case "$ACTION" in
                 ;;
             c) SERVER_CERT="$OPTARG";;
             w) WEBDIR="$OPTARG";;
+            P) PUSH_TOKEN="$OPTARG";;
             ?|:) echo "invalid arguments" > /dev/stderr; exit 1;;
         esac; done;;
     -h|--help|-?)