Use greenlock (ACME / Let's Encrypt client) with node cluster.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 

95 lines
3.3 KiB

"use strict";
// opts.addWorker(worker)
// opts.approveDomains(options, certs, cb)
module.exports.create = function(opts) {
opts = opts || {};
opts._workers = [];
opts.webrootPath = opts.webrootPath || require("os").tmpdir() + require("path").sep + "acme-challenge";
if (!opts.greenlock) {
opts.greenlock = require("greenlock").create(opts);
}
if ("function" !== typeof opts.approveDomains) {
throw new Error("You must provide opts.approveDomains(domain, certs, callback) to approve certificates");
}
function log(debug) {
if (!debug) {
return;
}
var args = Array.prototype.slice.call(arguments);
args.shift();
args.unshift("[le/lib/core.js]");
console.log.apply(console, args);
}
opts.addWorker = function(worker) {
opts._workers.push(worker);
worker.on("online", function() {
log(opts.debug, "worker is up");
});
worker.on("message", function(msg) {
log(opts.debug, "Message from worker " + worker.id);
if ("LE_REQUEST" !== (msg && msg.type)) {
log(opts.debug, "Ignoring irrelevant message");
log(opts.debug, msg);
return;
}
log(opts.debug, "about to approveDomains");
opts.approveDomains(msg.options, msg.certs, function(err, results) {
if (err) {
log(opts.debug, "Approval got ERROR", err.stack || err);
worker.send({
type: "LE_RESPONSE",
domain: msg.domain,
error: { message: err.message, code: err.code, stack: err.stack }
});
return;
}
var promise;
//
/*
var certs = require('localhost.example.com-certificates').merge({
subject: msg.domain
, altnames: [ msg.domain ]
, issuedAt: Date.now()
, expiresAt: Date.now() + (90 * 24 * 60 * 60 * 1000)
});
certs.privkey = certs.key.toString('ascii');
certs.cert = certs.cert.toString('ascii');
certs.chain = '';
worker.send({ type: 'LE_RESPONSE', domain: msg.domain, certs: certs });
return;
// */
if (results.certs) {
promise = opts.greenlock.renew(results.options, results.certs);
} else {
promise = opts.greenlock.register(results.options);
}
promise.then(
function(certs) {
log(opts.debug, "Approval got certs", certs);
// certs = { subject, domains, issuedAt, expiresAt, privkey, cert, chain };
opts._workers.forEach(function(w) {
w.send({ type: "LE_RESPONSE", domain: msg.domain, certs: certs });
});
},
function(err) {
log(opts.debug, "Approval got ERROR", err.stack || err);
worker.send({ type: "LE_RESPONSE", domain: msg.domain, error: err });
}
);
});
});
};
return opts;
};