voltron/NodeMgmt
1
1
Fork 0
Code Issues Pull Requests Releases 1 Activity

Update nodemgmt-scripts.sh

Browse Source
This commit is contained in:
David Schroeder
2022-11-08 19:13:54 -06:00
parent d17c2259ff
commit 82222954e0
1 changed files with 9 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
nodemgmt-scripts.sh
View File

@@ -1944,6 +1944,10 @@ VCENTER-SSL(){
VCUSER="administrator@scity.vs" VCUSER="administrator@scity.vs"
CURRENTLIVE=/etc/vmware-rhttpproxy/ssl/rui.crt CURRENTLIVE=/etc/vmware-rhttpproxy/ssl/rui.crt
CERT=/root/.acme.sh/$VCHOSTNAME/$VCHOSTNAME.cer
KEY=/root/.acme.sh/$VCHOSTNAME/$VCHOSTNAME.key
CHAIN=/root/.acme.sh/$VCHOSTNAME/fullchain.cer
echo -en "${idsCL[LightCyan]}Checking days left on vCenter cert... ${idsCL[Default]}" echo -en "${idsCL[LightCyan]}Checking days left on vCenter cert... ${idsCL[Default]}"
VCCERTDAYS=$(${FOLDER}/ssl-cert-check/ssl-cert-check -p 443 -s ${VCHOSTNAME} -N) VCCERTDAYS=$(${FOLDER}/ssl-cert-check/ssl-cert-check -p 443 -s ${VCHOSTNAME} -N)
VCCERTDAYS=${VCCERTDAYS#*=} VCCERTDAYS=${VCCERTDAYS#*=}
@@ -1960,8 +1964,8 @@ VCENTER-SSL(){
echo echo
fi fi
LIVEMD5=$(md5sum $CURRENTLIVE | cut -d\ -f1) LIVEMD5=$(ssh root@$VCHOSTNAME "md5sum $CURRENTLIVE | cut -d\ -f1")
CURRENTMD5=$(md5sum $CERT | cut -d\ -f1) CURRENTMD5=$(md5sum $CERTDIR/cert.pem | cut -d\ -f1)
if [ "$LIVEMD5" == "$CURRENTMD5" ]; then if [ "$LIVEMD5" == "$CURRENTMD5" ]; then
echo -e "${idsCL[Yellow]}Certificates remains the same, no newer certificates exist${idsCL[Default]}" echo -e "${idsCL[Yellow]}Certificates remains the same, no newer certificates exist${idsCL[Default]}"
echo echo
@@ -1972,16 +1976,11 @@ VCENTER-SSL(){
echo -e "${idsCL[LightCyan]}This process make take up to 10mins${idsCL[Default]}" echo -e "${idsCL[LightCyan]}This process make take up to 10mins${idsCL[Default]}"
echo echo
# eval $(awk '{ print "export " $1 }' /etc/sysconfig/vmware-environment) # eval $(awk '{ print "export " $1 }' /etc/sysconfig/vmware-environment)
CERT=/root/.acme.sh/$VCHOSTNAME/$VCHOSTNAME.cer scp $BASECERTDIR/$VCHOSTNAME/cert.pem root@${VCHOSTNAME}:$CERT
KEY=/root/.acme.sh/$VCHOSTNAME/$VCHOSTNAME.key scp $BASECERTDIR/$VCHOSTNAME/privkey.pem root@${VCHOSTNAME}:$KEY
CHAIN=/root/.acme.sh/$VCHOSTNAME/fullchain.cer scp $BASECERTDIR/$VCHOSTNAME/fullchain.pem root@${VCHOSTNAME}:$CHAIN
scp /opt/nginx-proxy/ssl/$VCHOSTNAME/cert.pem root@${VCHOSTNAME}:$CERT
scp /opt/nginx-proxy/ssl/$VCHOSTNAME/privkey.pem root@${VCHOSTNAME}:$KEY
scp /opt/nginx-proxy/ssl/$VCHOSTNAME/fullchain.pem root@${VCHOSTNAME}:$CHAIN
ssh root@$VCHOSTNAME "(printf '1\n%s\n' '$VCUSER'; sleep 1; printf '%s\n' '$(pass iDSVC)'; sleep 1; printf '2\n'; sleep 1; printf '%s\n%s\n%s\ny\n\n' '$CERT' '$KEY' '$CHAIN') | setsid /usr/lib/vmware-vmca/bin/certificate-manager" ssh root@$VCHOSTNAME "(printf '1\n%s\n' '$VCUSER'; sleep 1; printf '%s\n' '$(pass iDSVC)'; sleep 1; printf '2\n'; sleep 1; printf '%s\n%s\n%s\ny\n\n' '$CERT' '$KEY' '$CHAIN') | setsid /usr/lib/vmware-vmca/bin/certificate-manager"