mirror
/
piku
kopia lustrzana https://github.com/piku/piku
1
0
Forkuj 0
Kod Zgłoszenia Packages Projekty Wydania Wiki Aktywność

Generate self-signed cert if acme fails. (#46) 

Under certain conditions the acme cert generation will fail and create a
zero-byte certificate. Nginx does not like this so in that case piku.py
will generate a self-signed cert as a fallback with this patch.
pull/51/head
Chris McCormick 2019-06-27 14:41:07 +08:00 zatwierdzone przez Rui Carmo
rodzic 8c835b28ad
commit 02c9017db9
1 zmienionych plików z 1 dodań i 1 usunięć
Pokaż statystyki Ściągnij plik aktualizacji Ściągnij plik porównania Expand all files Collapse all files

2
piku.py
Wyświetl plik

@ -577,7 +577,7 @@ def spawn_app(app, deltas={}):
echo("-----> letsencrypt certificate already installed") echo("-----> letsencrypt certificate already installed")
# fall back to creating self-signed certificate if acme failed # fall back to creating self-signed certificate if acme failed
if not exists(key): if not exists(key) or stat(crt).st_size == 0:
echo("-----> generating self-signed certificate") echo("-----> generating self-signed certificate")
call('openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/C=US/ST=NY/L=New York/O=Piku/OU=Self-Signed/CN={domain:s}" -keyout {key:s} -out {crt:s}'.format(**locals()), shell=True) call('openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/C=US/ST=NY/L=New York/O=Piku/OU=Self-Signed/CN={domain:s}" -keyout {key:s} -out {crt:s}'.format(**locals()), shell=True)