You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
102 lines
3.8 KiB
102 lines
3.8 KiB
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
'use strict';
|
|
|
|
var le;
|
|
var fetch = require('node-fetch');
|
|
var LE = require('greenlock');
|
|
var leChallengeDns = require('./index.js').create({ debug: false })
|
|
// Storage Backend
|
|
var leStore = require('le-store-certbot').create({
|
|
configDir: '~/letsencrypt/etc' // or /etc/letsencrypt or wherever
|
|
, debug: true
|
|
, logsDir: '~/letsencrypt/var/log'
|
|
});
|
|
|
|
function leAgree(opts, agreeCb) {
|
|
// opts = { email, domains, tosUrl }
|
|
agreeCb(null, opts.tosUrl);
|
|
}
|
|
|
|
let subdomain = String(Math.random()).replace('.','');
|
|
|
|
le = LE.create({
|
|
server: LE.productionServerUrl // Change to LE.productionServerUrl in production
|
|
, challengeType: 'dns-01'
|
|
, challenges: {
|
|
'dns-01': leChallengeDns
|
|
}
|
|
, approveDomains: [ subdomain + '.box.knilxof.org' ]
|
|
, agreeToTerms: leAgree // hook to allow user to view and accept LE TOS
|
|
, debug: true
|
|
, store: leStore
|
|
});
|
|
|
|
|
|
|
|
// Check in-memory cache of certificates for the named domain
|
|
le.check({ domains: [ subdomain + '.box.knilxof.org' ] }).then(function (results) {
|
|
|
|
if (results) {
|
|
// we already have certificates
|
|
return;
|
|
}
|
|
|
|
let token;
|
|
let challenge;
|
|
|
|
// promise to be called when LE has the dns challenge ready for us
|
|
leChallengeDns.leDnsResponse = function(challenge, keyAuthorization, keyAuthDigest, challengeDomain, domain){
|
|
|
|
console.info("");
|
|
console.info("Challenge for '" + domain + "'");
|
|
console.info("");
|
|
console.info("We now present (for you copy-and-paste pleasure) your ACME Challenge");
|
|
console.info("public Challenge and secret KeyAuthorization and Digest, in that order, respectively:");
|
|
console.info(challenge);
|
|
console.info(keyAuthorization);
|
|
console.info(keyAuthDigest);
|
|
console.info("");
|
|
console.info(challengeDomain + "\tTXT " + keyAuthDigest + "\tTTL 60");
|
|
console.info("");
|
|
console.info(JSON.stringify({
|
|
domain: domain
|
|
, challenge: challenge
|
|
, keyAuthorization: keyAuthorization
|
|
, keyAuthDigest: keyAuthDigest
|
|
}, null, ' ').replace(/^/gm, '\t'));
|
|
console.info("");
|
|
|
|
return new Promise((resolve, reject) => {
|
|
// ok now that we have a challenge, we call our gateway to setup the TXT record
|
|
fetch('http://knilxof.org//dnsconfig?token=' + token + '&challenge=' + keyAuthDigest)
|
|
.then(function(res) { return res.text(); }).then(function(body) {
|
|
console.log(body);
|
|
resolve("Success!");
|
|
});
|
|
});
|
|
}
|
|
|
|
fetch('http://knilxof.org/subscribe?name=' + subdomain)
|
|
.then(function (res) { return res.text(); })
|
|
.then(function (body) {
|
|
const jsonBody = JSON.parse(body);
|
|
token = jsonBody.token;
|
|
// Register Let's Encrypt
|
|
le.register({
|
|
domains: [subdomain + '.box.knilxof.org'] // CHANGE TO YOUR DOMAIN (list for SANS)
|
|
, email: 'john.doe@example.com' // CHANGE TO YOUR EMAIL
|
|
, agreeTos: true // set to tosUrl string (or true) to pre-approve (and skip agreeToTerms)
|
|
, rsaKeySize: 2048 // 2048 or higher
|
|
, challengeType: 'dns-01' // http-01, tls-sni-01, or dns-01
|
|
}).then(function (results) {
|
|
console.log('success');
|
|
}, function (err) {
|
|
console.error('[Error]: node-greenlock/examples/standalone');
|
|
console.error(err.stack);
|
|
});
|
|
});
|
|
});
|
|
|
|
|