tony
/
mb-admin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SSL Fix for old and custom domain

main
Anthony 2025-08-21 01:04:14 +08:00
parent 6d125d46e3
commit 02944ee0b2
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
scripts/ssl-manager/ssl_manager.sh
View File

@ -28,6 +28,22 @@ DEBUG_LOG="${LOG_DIR}/ssl_manager-debug.log"
BACKUP_FILE="${LOG_DIR}/httpd_config_backup_$(date +%Y%m%d%H%M%S).xml" BACKUP_FILE="${LOG_DIR}/httpd_config_backup_$(date +%Y%m%d%H%M%S).xml"
SCRIPT_EXIT_STATUS=0 SCRIPT_EXIT_STATUS=0
UPDATE_LISTENER=0
# Replace listener-level certificate with Let's Encrypt files for PRIMARY_DOMAIN
update_listener_cert() {
local dom="$PRIMARY_DOMAIN"
local src_dir="$CERT_DIR/$dom"
local dst_dir="$SERVER_ROOT/ssl"
if [[ ! -f "$src_dir/fullchain.pem" || ! -f "$src_dir/privkey.pem" ]]; then
log_error "Listener update requested but LE files for '$dom' not found in $src_dir"; return 1
fi
sudo install -m600 "$src_dir/privkey.pem" "$dst_dir/litespeed.key"
sudo install -m644 "$src_dir/fullchain.pem" "$dst_dir/litespeed.crt"
log_success "Listener certificate replaced with LE cert for '$dom'"
return 0
}
setup_logging() { setup_logging() {
# Create log directory if it doesn't exist # Create log directory if it doesn't exist
sudo mkdir -p "$LOG_DIR" || { echo "❌ ERROR: Cannot create log directory '$LOG_DIR'. Check permissions."; exit 1; } sudo mkdir -p "$LOG_DIR" || { echo "❌ ERROR: Cannot create log directory '$LOG_DIR'. Check permissions."; exit 1; }
@ -340,6 +356,7 @@ main() {
--email=*) EMAIL="${arg#*=}"; log_verbose "Set email: $EMAIL";; --email=*) EMAIL="${arg#*=}"; log_verbose "Set email: $EMAIL";;
--vhost=*) VHOST_NAME="${arg#*=}"; log_verbose "Set vhost name: $VHOST_NAME";; --vhost=*) VHOST_NAME="${arg#*=}"; log_verbose "Set vhost name: $VHOST_NAME";;
--verbose) VERBOSE=1; log "Verbose mode enabled";; --verbose) VERBOSE=1; log "Verbose mode enabled";;
--update-listener) UPDATE_LISTENER=1; log "Updating listener certificate to LE for $PRIMARY_DOMAIN";;
*) log_error "Invalid argument: $arg"; SCRIPT_EXIT_STATUS=1; exit 1;; *) log_error "Invalid argument: $arg"; SCRIPT_EXIT_STATUS=1; exit 1;;
esac esac
done done
@ -371,6 +388,10 @@ main() {
cleanup_xml "$domain" cleanup_xml "$domain"
done done
if [[ "$UPDATE_LISTENER" -eq 1 ]]; then
update_listener_cert || { SCRIPT_EXIT_STATUS=1; return 1; }
fi
restart_litespeed restart_litespeed
log_success "SSL Manager completed successfully" log_success "SSL Manager completed successfully"