X-Git-Url: https://git.rapsys.eu/acme/blobdiff_plain/e714f0566d12b8ad35c9e3768ed6a6f0f5236a9f..707fca91ce64b098f3bc55721f630b6822d48bd8:/acmeconf

diff --git a/acmeconf b/acmeconf
new file mode 100755
index 0000000..c5b9134
--- /dev/null
+++ b/acmeconf
@@ -0,0 +1,144 @@
+#! /usr/bin/perl
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+# Copyright (C) 2016 - 2017 Raphaël Gertz <acme@rapsys.eu>
+
+# Best practice
+use strict;
+use warnings;
+
+# Load required modules
+use JSON;
+use Tie::IxHash;
+
+# Load POSIX
+use POSIX qw(EXIT_SUCCESS EXIT_FAILURE);
+
+# Init redhat
+my @redhat = ();
+
+# Init debian
+my @debian = ();
+
+# Init root
+my %root = ();
+tie(%root, 'Tie::IxHash', thumbprint => '/etc/acmepl/thumbprint', certificates => []);
+
+# Init prod
+my $prod = 0;
+
+# Strip and enable prod
+@ARGV = map { if ($_ eq '-p') { $prod = 1; (); } else { $_; } } @ARGV;
+
+# Strip and enable debug
+for (my $i = 0; $i <= $#ARGV; $i++) {
+	# Match redhat types
+	if ($ARGV[$i] =~ /^(?:(\-r|\-\-redhat)(?:=([^-][a-zA-Z0-9_\.,-]+))?)$/) {
+		if (defined($2)) {
+			push(@redhat, [split(',', $2)]);
+		# Extract next parameter
+		} elsif(defined($ARGV[$i+1]) && $ARGV[$i+1] =~ /^([^-][a-zA-Z0-9_\.,-]+)$/) {
+			push(@redhat, [split(',', $1)]);
+			$i++;
+		# Set default
+		} else {
+			push(@redhat, ['www.example.com','example.com','...']);
+		}
+	# Match debian types
+	} elsif ($ARGV[$i] =~ /^(?:(\-d|\-\-debian)(?:=([^-][a-zA-Z0-9_\.,-]+))?)$/) {
+		if (defined($2)) {
+			push(@debian, [split(',', $2)]);
+		# Extract next parameter
+		} elsif(defined($ARGV[$i+1]) && $ARGV[$i+1] =~ /^([^-][a-zA-Z0-9_\.,-]+)$/) {
+			push(@debian, [split(',', $1)]);
+			$i++;
+		# Set default
+		} else {
+			push(@debian, ['www.example.com','example.com','...']);
+		}
+	}
+}
+
+# Show usage
+if (scalar(@ARGV) < 1) {
+	print "Usage: $0 [(-d|--debian)[=example.com[,...]] [(-r|--redhat)[=example.com[,...]]] [...] > /etc/acmepl/config\n";
+	exit EXIT_FAILURE;
+}
+
+# Append redhat style examples
+for my $key (@redhat) {
+	my $domain = shift @{$key};
+	my @domains = $key;
+	tie(%{$root{certificates}[$#{$root{certificates}}+1]}, 'Tie::IxHash', (
+		# Public cert
+		#XXX: required
+		cert => '/etc/pki/tls/certs/'.$domain.'.pem',
+		# Private key
+		#XXX: required
+		key => '/etc/pki/tls/private/'.$domain.'.pem',
+		# Private account key
+		#XXX: required
+		account => '/etc/acme/account.pem',
+		# Mail address
+		#XXX: required
+		mail => 'webmaster@'.$domain,
+		# Root domain
+		#XXX: required
+		domain => $domain,
+		# Domain list
+		#XXX: required
+		domains => @domains,
+		# Production certificate
+		#XXX: optional
+		#XXX: set to 1 for production
+		prod => $prod
+	));
+}
+
+# Append debian style examples
+for my $key (@debian) {
+	my $domain = shift @{$key};
+	my @domains = $key;
+	tie(%{$root{certificates}[$#{$root{certificates}}+1]}, 'Tie::IxHash', (
+		# Public cert
+		#XXX: required
+		cert => '/etc/ssl/certs/'.$domain.'.crt',
+		# Private key
+		#XXX: required
+		key => '/etc/ssl/private/'.$domain.'.key',
+		# Private account key
+		#XXX: required
+		account => '/etc/acme/account.pem',
+		# Mail address
+		#XXX: required
+		mail => 'webmaster@'.$domain,
+		# Root domain
+		#XXX: required
+		domain => $domain,
+		# Domain list
+		#XXX: required
+		domains => @domains,
+		# Production certificate
+		#XXX: optional
+		#XXX: set to 1 for production
+		prod => $prod
+	));
+}
+
+# Display configuration template
+print to_json(\%root, {pretty => 1});
+
+# Exit with success
+exit EXIT_SUCCESS;