Commit Graph

297 Commits (1e3bb1f02b674e37d6dd15096782eea2e3cafb0a)

Author SHA1 Message Date
Moritz H ed01fd4edf uconv as fallback for iconv 4 years ago
neil 7530266330 remove dependency to md5 and awk 4 years ago
neil 97b87d4ce4
Merge pull request #3111 from pashinin/master
Vault deploy hook (using curl)
4 years ago
Sergey Pashinin e203e98375
Use _savedeployconf 4 years ago
Sergey Pashinin 9fcd104065
Use _getdeployconf for env vars 4 years ago
Sergey Pashinin f511a52705
Using _post function 5 years ago
Sergey Pashinin de692d3dcc
Vault deploy hook 5 years ago
neil 19c4345162 fix shfmt 5 years ago
Brian Hartvigsen 5f5096e1d4
Addressing issues found in DS218+ DSM
DS218+ appears to have a slighly different DSM that sends back headers in lowercase.

Reported by @BartSiwek in #2727
5 years ago
neil 7f33ae3bee
Merge pull request #3059 from andybotting/dev
Fix CI test failure for deploy/openstack.sh
5 years ago
neil 645135bf56
Merge pull request #3051 from szepeviktor/patch-2
Upgrade Travis image
5 years ago
Viktor Szépe 61613bee98
Fix SC2230 5 years ago
Andy Botting 3ce967d8e5 Fix CI test failure for deploy/openstack.sh 5 years ago
Andy Botting 9b23cd6d19 Add OpenStack Barbican deploy support
This provider relies on the the python-openstackclient and
python-designateclient tools be installed and working, with
either password or application credentials loaded in your env.
5 years ago
andrewheberle 01ebb6576d
Use base64 for reload
Ensure that reload command is encoded with base64 so special characters in command do not wreck config on renewals
5 years ago
Tony Gravagno eca57beec1
Issue #2850 : grammar corrections for "exists" and "exist". 5 years ago
PM Extra a78a09f594 Support multiple servers for SSH deployment. 5 years ago
neil 341f000b9c
Merge pull request #2947 from kref/patch-1
fix octal escapes for printf %b format
5 years ago
kref 0deea53931
fix octal escapes for printf %b format
Stop it from misinterpreting a following digit as part of the escape sequence
5 years ago
Brian Hartvigsen 694194be2f
Shellcheck fix
SYNO_Certificate gets set by _getdeployconf, so this may be an empty string but that's fine
5 years ago
Brian Hartvigsen c7f61f8b80
Allow rotating the default certificate which has no description
This means, by default, we will rotate the default certificate that comes with the DSM
5 years ago
Brian Hartvigsen 3a7c7fe4e8
Fix shellcheck issues 5 years ago
Brian Hartvigsen 668967a719
If SYNO_Create is not set here, print the nice message 5 years ago
Brian Hartvigsen d15c14ab93
Fix support for wget
I'm actually not entirely sure why/how this worked with curl but not wget, but it did.  The short answer is that using a GET does not result in the HTTP_HEADER file being written, instead you must pass in the http_headers param ($2) which will return the HTTP headers as a string.  Luckily, the Token is in both the body and the header.  We need it and the id (and smid if 2fa) cookie to proceed.  So now we parrse the response for that instead of the HTTP_HEADER file.

Interesting side note: wget is fine if the URL contains a \r or \n, but curl will barf on it.  So we need to make sure those are stripped from the token as it will be passed in the URL later.
5 years ago
Brian Hartvigsen 52b81608a1
need to _url_encode anything sent in GET requests
Fixes issue raised by @tatablack
5 years ago
Felix Bünemann cf5952f508
fix haproxy deploy hook ocsp update
fixes ocsp reponse update failing with `Responder Error: unauthorized (6)`
by removing `-no_nonce` switch from `openssl oscp` command .
5 years ago
neil b6fbb012ad
Merge pull request #2749 from dkerr64/ssh-deploy
Updates to ssh_deploy hook
5 years ago
ucando 6132af8ecb enable qiniu to deploy more than one domain 5 years ago
Brian Torres-Gil 0453d656d6 fix(deploy/panos): data format improvements
It was discovered in testing that PAN-OS < 9.0 has slightly different
requirements for the multipart/form-data format and requires the `type`
parameter to be passed in the URL. These corrections should work for all
PAN-OS versions.
5 years ago
dkerr64 f38df4df11 Make remote backup directory path user configurable. 5 years ago
dkerr64 554e083f3d For MULTI_CALL default to undefined, deleting entry in config file if set to "no" 5 years ago
Markus Lippert fd64c20807 store device ID 5 years ago
Markus Lippert 80f1034dd6 add OTP support 5 years ago
dkerr64 8ba573d196 Change variable name to MULTI_CALL so default can be "no" 5 years ago
dkerr64 f73a494407 Remove spaces on blank line to fix travis error 5 years ago
dkerr64 46ee74ed16 Remove variable from info/error printout that could potentially expose login credentials. 5 years ago
dkerr64 806b746fc0 Fix bug where backup and batch_mode yes/no values could not be changed.
Once set to "no" then they could never be set back to "yes"
5 years ago
dkerr64 cc820e97c6 Add support for DEPLOY_SSH_BATCH_MODE with default of yes.
Before this update all remote commands were bunched together and
sent to the remote host in a single SSH command.  This could result
in a very long sequence of commands that might be rejected by a
remote host (example is VMware ESXi that uses busybox sh).
With this update you can set DEPLOY_SSH_BATCH_MODE="no" and
each remote command is sent as a separate SSH call so now we
do not have big long sequence of commands.  Defaults to same
behaviour as before this update.
5 years ago
dkerr64 283b04df73 Move cleanup of backup directory to first step in the function. 5 years ago
dkerr64 6420d1239f Move call to remote system into separate function 5 years ago
dkerr64 3d9608faa0 Move -T parameter into default ssh command variable 5 years ago
xpac1985 e184a1b9e6
haproxy deploy script now compatible with OpenSSL v1.1+
haproxy deploy script now compatible with OpenSSL v1.1+

The OpenSSL OCSP request for haproxy deployment breaks from OpenSSL v1.1.0 on.
The format of the `-header` option has been changed and does now contain a `=` instead of a whitespace.
Other projects have hit the same issue:
https://github.com/nghttp2/nghttp2/issues/742

This commit determines the OpenSSL/LibreSSL version and then adjusts the request accordingly.
Also removed the duplicate command line and added some more debug output.
5 years ago
neil 754f7a7891
Merge pull request #2614 from PaloAltoNetworks/deploy-panos
Adding abillity to deploy cert to Palo Alto Networks Firewall via API.
5 years ago
Paul Nguyen 21450a08c2 Fixed 6 character requirement. 5 years ago
Paul Nguyen c355b25bb1 Fixed line formatting 5 years ago
Paul Nguyen 1fe3d80838 Updated to use saveconf function and base64encode. 5 years ago
Paul Nguyen 930e16b64a fix gitdiff 5 years ago
Paul Nguyen 2077a70d03 Fixing gitdiff 5 years ago
Paul Nguyen cbdb8bd9b9 Fixing gitdiff 5 years ago
Paul Nguyen 5dcb417676 ShellCheck fixes 5 years ago