adfafe5c54
reverted bad merge
2024-08-11 22:48:44 -04:00
a8d8fefceb
Merge branch 'acmesh-official:dev' into dev
2024-08-11 22:47:00 -04:00
3bb5943b20
Merge branch 'dev' of https://github.com/3VAbdAVE/acme.sh into dev
2024-08-11 22:44:13 -04:00
57da04b5ec
Updated Unifi deploy hook to use openssl's pkcs12 instead of Java Keytool after Ubiquiti removed it, update system configuration for stronger ciphers, and back up existing certificates prior to change.
2024-08-11 22:39:47 -04:00
de902166a8
Replaced keytool with openssl pkcs12. Added backup of original certificates.
2024-08-01 08:15:16 -07:00
11aef82993
Merge pull request #5139 from scruel/scruel-patch-1
...
feat: guide user to run script as root to create temp admin user
2024-07-19 11:16:44 +08:00
60569fdd83
fix(deploy): respect api path with synology Auth API
...
fix #5184
2024-07-14 15:04:43 +08:00
e0c63d58b2
improve compatibility with FreeBSD
...
it is related to this bug report: opnsense/plugins#3525
FreeBSD's sed doesn't have the -z option, so empty certificates are delivered to vault when running the script on FreeBSD.
2024-06-15 23:19:04 +02:00
b1d019146a
UBNT removed keytool from UnifiOS, modify to use openssl PKCS12. Also backup certificates before overwrite, and force unifi to start with unifi-core if both are installed.
2024-05-13 07:50:46 -04:00
1dbc58d4e0
chore: optimize more msgs
2024-05-08 14:01:43 +08:00
47ccb28482
chore: typo
2024-05-08 04:46:51 +08:00
744dea00ca
feat: guide user to run script as root to create temp admin user
...
Message text and comment optimized
2024-05-08 02:56:21 +08:00
cd01104de9
fix(deploy_dsm): ensure grep get the error code
...
Added grep -o option to ensure the script won't get other digits as the error code result
2024-04-25 13:39:05 +08:00
9ff89b570f
fix(deploy_dsm): missing gerp -P option on busybox
...
Fixes: #5105
2024-04-25 04:02:49 +08:00
9863e7ea6e
Merge pull request #5023 from scruel/patch-dsm-deploy
...
Patch Synology DSM deploy: support DSM 6.x & user-friendly refactor.
2024-04-21 09:45:41 +02:00
c51104f956
fix format
2024-03-31 20:33:57 +02:00
cc5c722e29
Merge pull request #5072 from aSauerwein/master
...
feature: add template option for panos deploy hook
2024-03-31 20:15:18 +02:00
4fcddd1893
add template option
2024-03-31 09:16:21 +02:00
2728d2aa6e
fix format
2024-03-18 21:09:49 +01:00
0588fc6b7c
Merge pull request #4581 from wlallemand/haproxy-hot-update
...
haproxy deploy hook updates existing certificate over stats socket
2024-03-18 21:07:12 +01:00
6af5293315
doc: adjust
2024-02-28 02:00:07 +08:00
ff090d2f74
fix lint
2024-02-26 23:45:19 +08:00
68e3a12a91
feat: improve robustness of the usage of DSM tool `synogroup`
2024-02-26 23:38:44 +08:00
50eda6b678
fix: lint
2024-02-26 21:07:15 +08:00
192ec598a3
feat: add `SYNO_LOCAL_HOSTNAME` to prevent remote deploy via temp admin method
2024-02-26 21:03:26 +08:00
5b449999a5
refactor: unify variable naming convention again (revert some changes)
2024-02-26 20:55:49 +08:00
afed62f6de
fix: should save `SYNO_UseTempAdmin` only after login success.
2024-02-26 07:05:00 +08:00
59d1e16f9c
feat: bypass enforce temp admin 2FA
2024-02-26 06:23:47 +08:00
dbe0d477d6
feat: more user-friendly logic & error messages.
2024-02-26 06:23:46 +08:00
7248560169
feat: support DSM 6.x
2024-02-26 06:23:45 +08:00
f840f7d75b
refactor: unify variable naming convention
2024-02-26 06:23:42 +08:00
cf3839ecec
doc(deploy): update usage doc
2024-02-22 12:38:51 +08:00
aa8cf76fb1
Merge pull request #4706 from scruel/syno-patch
...
Add SYNO_USE_TEMP_ADMIN variable & Fix broken logic
2024-02-13 09:57:51 +08:00
2e58cf1168
Merge pull request #4940 from dario-pilori/fix-routeros-7
...
Fix RouterOS deploy hook for 7
2024-01-04 23:15:36 +01:00
3ca97d7258
Remove whitespace in script name in routeros.sh deploy hook
2024-01-04 18:28:05 +01:00
6992659ba9
Update synology_dsm.sh
2023-12-22 14:36:52 -05:00
05696d443a
Update synology_dsm.sh
...
#2727 issue when logging out on older version - using variables to unlog only for CERT user
2023-12-22 14:34:35 -05:00
f59a925897
Update synology_dsm.sh
...
Issue for lougout
2023-12-22 09:09:29 -05:00
e09d45c844
haproxy; don't use '*' in the filename for wildcard domain
...
By default acme.sh uses the '*' character in the filename for wildcard.
That can be confusing within HAProxy since the * character in front of a
filename in the stat socket is used to specified an uncommitted
transaction.
This patch replace the '*' by a '_' in the filename.
This is only done when using the default filename, the name can still be
forced with an asterisk.
2023-12-01 15:35:31 +01:00
36fc321096
haproxy: use the master CLI for hot update
...
DEPLOY_HAPROXY_MASTER_CLI allows to use the HAProxy master CLI instead
of a stats socket for DEPLOY_HAPROXY_HOT_UPDATE="yes"
The syntax of the master CLI is slightly different, a prefix with the
process number need to be added before any command.
This patch uses ${_cmdpfx} in front of every socat commands which is
filled when the master CLI is used.
2023-11-30 15:22:51 +01:00
98a7a01dbb
haproxy: deploy script can add a new certificate over the stats socket
...
DEPLOY_HAPROXY_HOT_UPDATE="yes" now allows to add a new certificate
within HAProxy instead of updating an existing one.
In order to work, the ${DEPLOY_HAPROXY_PEM_PATH} value must be used as a
parameter to the "crt" keyword in the haproxy configuration.
The patch uses the following commands over HAProxy stats socket:
- show ssl cert
- new ssl cert
- set ssl cert
- commit ssl cert
- add ssl crt-list
2023-11-30 14:00:44 +01:00
0f7be90500
haproxy: deploy script can update existing certificate over stats socket
...
Since version 2.2, HAProxy is able to update dynamically certificates,
without a reload.
This patch uses socat to push the certificate into HAProxy in order to
achieve hot update. With this method, reloading is not required.
This should be used only to update an existing certificate in haproxy.
2 new variables are available:
- DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead
of reloading
- DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on
the stats socket.
2023-11-30 14:00:44 +01:00
7aaf4432d4
haproxy: sanitize the PEM in the deploy script
...
Sanitize the PEM of the haproxy deploy script by removing the '\n', this
way it could be injected directly over the CLI.
2023-11-30 14:00:41 +01:00
884a8995b4
Merge pull request #4853 from Max13/deploy/proxmoxve
...
Fix typo in proxmoxve deploy hook
2023-11-22 09:19:51 +01:00
00dbc3881f
Fixed variables
2023-11-01 20:02:16 +01:00
8ca5ca6594
Update haproxy.sh
...
resolved issue with HAProxy https://github.com/acmesh-official/acme.sh/issues/4788
according https://serversforhackers.com/c/letsencrypt-with-haproxy
2023-10-24 16:58:47 +03:00
87a7bde618
fix: Synology DSM API path regex
...
Fix the regex for looking up the API path value from the Synology API query.
2023-09-25 18:43:01 +03:00
29b2960805
Optimze comment & remove tail space
2023-09-07 15:01:37 +08:00
f7f3a0bf0d
Merge branch 'dev' into syno-patch
2023-09-07 14:57:53 +08:00
b793dbf977
Fix device ID property name for DSM 6
2023-08-11 17:55:45 +02:00
3VAbdAVE