● LETSENCRYPT SSL 인증서 자동갱신 쉘스크립트

#!/bin/sh

TODAY=`date +%Y%m%d%H`

LOG_FILE="/root/letsencrypt.txt"

KEY_PATH="/etc/letsencrypt/live"

KEY_FILE="cert.pem"

EMAIL="email@example.com"

DOMAINS="

    www.example.com

    "

if [ -e "/usr/bin/letsencrypt" ] ; then

    LETSENCRYPT="/usr/bin/letsencrypt"

else

    LETSENCRYPT="/root/letsencrypt/letsencrypt-auto"

fi

for DOMAIN in $DOMAINS ; do

    CERT_PATH="$KEY_PATH/$DOMAIN/$KEY_FILE"

    if [ -e "$CERT_PATH" ] ; then

        C_DATE=`openssl x509 -in $CERT_PATH -text -noout | grep After | awk -F ' : ' '{print $2}'`

        R_DATE=`date +%Y%m%d%H --date="$C_DATE -1 days"`

        if [ "$TODAY" -ge "$R_DATE" ] ; then

            echo "# $DOMAIN renew date : "`date` >> $LOG_FILE

            /root/bin/web-service.sh stop

            $LETSENCRYPT renew >> $LOG_FILE

            /root/bin/web-service.sh start

        fi

    else

        echo "# $DOMAIN create date : "`date` >> $LOG_FILE

        /root/bin/web-service.sh stop

        $LETSENCRYPT certonly --standalone --agree-tos -m $EMAIL -d $DOMAIN

        /root/bin/web-service.sh start

    fi

done