|
|
|
@ -85,22 +85,23 @@ routeros_deploy() {
|
|
|
|
|
scp "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key"
|
|
|
|
|
_info "Trying to push cert '$_cfullchain' to router"
|
|
|
|
|
scp "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer"
|
|
|
|
|
DEPLOY_SCRIPT_CMD="/system script add name=\"LE Cert Deploy - $_cdomain\" owner=admin policy=ftp,read,write,password,sensitive
|
|
|
|
|
source=\"## generated by routeros deploy script in acme.sh
|
|
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_0 ]
|
|
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_1 ]
|
|
|
|
|
\ndelay 1
|
|
|
|
|
\n/certificate import file-name=$_cdomain.cer passphrase=\\\"\\\"
|
|
|
|
|
\n/certificate import file-name=$_cdomain.key passphrase=\\\"\\\"
|
|
|
|
|
\ndelay 1
|
|
|
|
|
\n/file remove $_cdomain.cer
|
|
|
|
|
\n/file remove $_cdomain.key
|
|
|
|
|
\ndelay 2
|
|
|
|
|
\n/ip service set www-ssl certificate=$_cdomain.cer_0
|
|
|
|
|
\n$ROUTER_OS_ADDITIONAL_SERVICES
|
|
|
|
|
\n\"
|
|
|
|
|
"
|
|
|
|
|
# shellcheck disable=SC2029
|
|
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script add name=\"LE Cert Deploy - $_cdomain\" owner=admin policy=\
|
|
|
|
|
ftp,read,write,password,sensitive source=\"## generated by routeros deploy script in acme.sh \\r\
|
|
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_0 ]\\r\
|
|
|
|
|
\n/certificate remove [ find name=$_cdomain.cer_1 ]\\r\
|
|
|
|
|
\ndelay 1\\r\
|
|
|
|
|
\n/certificate import file-name=$_cdomain.cer passphrase=\\\"\\\"\\r\
|
|
|
|
|
\n/certificate import file-name=$_cdomain.key passphrase=\\\"\\\"\\r\
|
|
|
|
|
\ndelay 1\\r\
|
|
|
|
|
\n/file remove $_cdomain.cer\\r\
|
|
|
|
|
\n/file remove $_cdomain.key\\r\
|
|
|
|
|
\ndelay 2\\r\
|
|
|
|
|
\n/ip service set www-ssl certificate=$_cdomain.cer_0\\r\
|
|
|
|
|
\n$ROUTER_OS_ADDITIONAL_SERVICES\\r\
|
|
|
|
|
\n\"
|
|
|
|
|
"
|
|
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "$DEPLOY_SCRIPT_CMD"
|
|
|
|
|
# shellcheck disable=SC2029
|
|
|
|
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script run \"LE Cert Deploy - $_cdomain\""
|
|
|
|
|
# shellcheck disable=SC2029
|
|
|
|
|