smeserver-letsencrypt/contribs9/smeserver-letsencrypt.spec

%define name smeserver-letsencrypt
%define version 0.5
%define release 1
Summary: Plugin to enable letsencrypt certificates
Name: %{name}
Version: %{version}
Release: %{release}
License: GNU GPL version 2
URL: https://letsencrypt.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
#Patch0: smeserver-letsencrypt-xyz.patch

BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires: e-smith-release >= 9.0
Requires: dehydrated >= 0.6
AutoReqProv: no

%description
Lets Encrypt is a free, automated, and open certificate authority
https://letsencrypt.org/

%changelog
* Tue Jun 12 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1.sme
- Update to v2 API [SME:10595]
- Add key letsencrypt hostOverride to ignore 'Self' host check
- This requires v0.6 of dehydrated

* Wed Jun 06 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-6.sme
- Fix missing event actions [SME: 10315]

* Thu May 31 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5.sme
- Fix typo in Accept Terms
- add domain-delete to createlinks [SME: 10315]
- Update requires release to SME v9
- Update requires dehydrated to v0.5

* Fri Aug 18 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.4-4.sme
- change ACCEPT_TERMS template position to appear after shebang in config file [SME: 10410]

* Wed Jul 12 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.4-3.sme
- remove workaround for curl dns resolution [SME: 10300]
- should be corrected at dnscache level (djbdns-1.05-10)

* Fri Apr 28 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.4-2.sme
- help accept licence  [SME: 10253]
- workaround for curl issues
- spec tidying

* Sat Feb 04 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
 - first attempt at using stock letsencrypt script

* Wed Sep 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- Due to madness at letsencrypt the script had to be renamed for copyright reasons
- move /etc/letsencrypt.sh to /etc/dehydrated
- change references to letsencrypt.sh to dehydrated
- Fix typos in readme

* Wed Aug 3 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-10
- Some tweaks from JPP for the domains.txt file

* Wed Aug 3 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-9
- Fix version differences with between v8 and v9

* Thu Jul 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-8
- Remove spaces in POSTIN [[]]

* Mon Jun 27 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-7
- fix another typo in bash scripts
- fix typo in Docs

* Fri Jun 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-6
- Fix typo in domains.txt
- Set configure default type none

* Tue May 31 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-5
- update incorrect bash scripts in spec file

* Tue May 31 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-4
- update letsencrypt requires

* Mon May 30 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-3
- add support for letsencrypt.sh v0.2
- config.sh renamed to config
- fix trailing / on urls in 40ACME

* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-2
- letsencrypt.sh now calls deploy-cert with an argument for the chain file
- thanks to Dan Brown

* Tue Mar 29 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- Remove letsencrypt.sh script and put in separate RPM

* Tue Mar 29 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-21
- modify hook script templates as per Dan Browd contribution

* Thu Mar 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-20
- updated letsencrypt.sh
- https://github.com/lukas2511/letsencrypt.sh/commit/429c5250ede7ff4af3b6f37b39925cfa5afee278
- Add "" to wellknown path in config.sh

* Fri Feb 05 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-19
- updated letsencrypt.sh
- https://github.com/lukas2511/letsencrypt.sh/commit/21c18dd3b8c2572b894d9ec2e5c3fc2589f56f32

* Tue Jan 26 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-18
- updated letsencrypt.sh
- https://github.com/lukas2511/letsencrypt.sh/commit/79ff846e267c30d85988f79f58b81bc7bd91790c

* Sat Jan 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-17
- Fix typos in hook-script
- Add latest letsencrypt.sh script

* Wed Jan 20 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-16
- Minor fixes including typo in cron.daily

* Tue Jan 19 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-15
- Missed a "
- remove ' from Let's encrypt and add URL

* Tue Jan 19 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-14
- Updated readme and install notes
- Allow either domains or hosts

* Mon Jan 18 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-13
- Add missing templates.metadata file
- modify spec file wording

* Mon Jan 18 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-12
- Set hookscript to always run unless letsencrypt is disabled
- Add cron.daily script to console-save action and set perms

* Sun Jan 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-11
- Fix hook-script.sh perms using templates.metadata

* Sun Jan 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-10
- Add latest revision of letsencrypt.sh
- add hookscript.sh templates and various fixes

* Sat Jan 16 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-9
- Add latest revision of letsencrypt.sh

* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-8
- set +x on hook-script and correct file name in config

* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-7
- Add missing curly brace
- Move Status check line up so we can generate empty file if disabled

* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-6
- Add hookScript key

* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-5
- Modify spec file to add paths and set permisssions

* Thu Jan 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-4
- Modify file paths and cron script

* Thu Jan 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-3
- updated bash script in spec file
- updated file locations in README.MD

* Wed Jan 13 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-2
- Moved config.sh file location
- added cron.daily template - only works if letsencrypt is enabled
- added check to create /etc/letsencrypt.sh directory if it does not exist
- added latest letsencrypt.sh script

* Thu Jan 07 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup
# patch0 -p1

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre

%preun

%post
# if previously installed letsencrypt.sh, but first migration to dehydrated
if [[ -e /etc/letsencrypt.sh ]] && [[ ! -e /etc/dehydrated ]];
then
        # assume in production
#       CA="https://acme-v01.api.letsencrypt.org/directory" ;
#       CAHASH="$(echo "${CA}" | urlbase64)"
#       mkdir /etc/dehydrated;
#       mkdir -p /etc/dehydrated/accounts
#       cp -a /etc/letsencrypt.sh/private_key.json /etc/dehydrated/accounts/${CAHASH}/registration_info.json
#       cp -a /etc/letsencrypt.sh/private_key.pem /etc/dehydrated/accounts/${CAHASH}/account_key.pem
#       cp -a /etc/letsencrypt.sh/certs /etc/dehydrated/ 
        mv -f /etc/letsencrypt.sh /etc/letsencrypt.sh.old;
fi

# if letsencrypt still there but already migrated to dehydrated
if [[ -e /etc/letsencrypt.sh ]] && [[  -e /etc/dehydrated/certs ]];
then 
        mv -f /etc/letsencrypt.sh /etc/letsencrypt.sh.old;
fi

# if first installation of dehydrated
if [[ ! -e /etc/dehydrated ]];
then mkdir /etc/dehydrated;
fi

if [[ -f /usr/local/bin/config.sh ]];
then mv -f /usr/local/bin/config.sh /usr/local/bin/config.sh.orig;
fi

if [[ -f /usr/local/bin/config ]];
then mv -f /usr/local/bin/config /usr/local/bin/config.old;
fi

if [[ -f /usr/local/bin/domain.txt ]];
then mv -f /usr/local/bin/domains.txt /usr/local/bin/domains.txt.orig;
fi

if [[ ! -e /home/e-smith/files/ibays/Primary/html/.well-known/acme-challenge ]];
then mkdir -p /home/e-smith/files/ibays/Primary/html/.well-known/acme-challenge;
fi

chmod -R 0775  /home/e-smith/files/ibays/Primary/html/.well-known
chown -R apache:shared /home/e-smith/files/ibays/Primary/html/.well-known


%postun
1	unnilennium	1.1	%define name smeserver-letsencrypt
2	jcrisp	1.7	%define version 0.5
3			%define release 1
4	unnilennium	1.1	Summary: Plugin to enable letsencrypt certificates
5			Name: %{name}
6			Version: %{version}
7			Release: %{release}
8			License: GNU GPL version 2
9			URL: https://letsencrypt.org/
10			Group: SMEserver/addon
11			Source: %{name}-%{version}.tar.gz
12	jcrisp	1.7	#Patch0: smeserver-letsencrypt-xyz.patch
13	unnilennium	1.2
14	unnilennium	1.1	BuildRoot: /var/tmp/%{name}-%{version}
15			BuildArchitectures: noarch
16			BuildRequires: e-smith-devtools
17	jcrisp	1.5	Requires: e-smith-release >= 9.0
18	jcrisp	1.7	Requires: dehydrated >= 0.6
19	unnilennium	1.1	AutoReqProv: no
20
21			%description
22			Lets Encrypt is a free, automated, and open certificate authority
23			https://letsencrypt.org/
24
25			%changelog
26	jcrisp	1.7	* Tue Jun 12 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1.sme
27			- Update to v2 API [SME:10595]
28			- Add key letsencrypt hostOverride to ignore 'Self' host check
29			- This requires v0.6 of dehydrated
30
31	jcrisp	1.6	* Wed Jun 06 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-6.sme
32			- Fix missing event actions [SME: 10315]
33
34	jcrisp	1.5	* Thu May 31 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5.sme
35			- Fix typo in Accept Terms
36			- add domain-delete to createlinks [SME: 10315]
37			- Update requires release to SME v9
38			- Update requires dehydrated to v0.5
39
40	unnilennium	1.4	* Fri Aug 18 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.4-4.sme
41			- change ACCEPT_TERMS template position to appear after shebang in config file [SME: 10410]
42
43	unnilennium	1.3	* Wed Jul 12 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.4-3.sme
44			- remove workaround for curl dns resolution [SME: 10300]
45			- should be corrected at dnscache level (djbdns-1.05-10)
46
47	unnilennium	1.2	* Fri Apr 28 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.4-2.sme
48			- help accept licence [SME: 10253]
49			- workaround for curl issues
50			- spec tidying
51
52	unnilennium	1.1	* Sat Feb 04 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
53			- first attempt at using stock letsencrypt script
54
55			* Wed Sep 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
56			- Due to madness at letsencrypt the script had to be renamed for copyright reasons
57			- move /etc/letsencrypt.sh to /etc/dehydrated
58			- change references to letsencrypt.sh to dehydrated
59			- Fix typos in readme
60
61			* Wed Aug 3 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-10
62			- Some tweaks from JPP for the domains.txt file
63
64			* Wed Aug 3 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-9
65			- Fix version differences with between v8 and v9
66
67			* Thu Jul 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-8
68			- Remove spaces in POSTIN [[]]
69
70			* Mon Jun 27 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-7
71			- fix another typo in bash scripts
72			- fix typo in Docs
73
74			* Fri Jun 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-6
75			- Fix typo in domains.txt
76			- Set configure default type none
77
78			* Tue May 31 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-5
79			- update incorrect bash scripts in spec file
80
81			* Tue May 31 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-4
82			- update letsencrypt requires
83
84			* Mon May 30 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-3
85			- add support for letsencrypt.sh v0.2
86			- config.sh renamed to config
87			- fix trailing / on urls in 40ACME
88
89			* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-2
90			- letsencrypt.sh now calls deploy-cert with an argument for the chain file
91			- thanks to Dan Brown
92
93			* Tue Mar 29 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
94			- Remove letsencrypt.sh script and put in separate RPM
95
96			* Tue Mar 29 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-21
97			- modify hook script templates as per Dan Browd contribution
98
99			* Thu Mar 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-20
100			- updated letsencrypt.sh
101			- https://github.com/lukas2511/letsencrypt.sh/commit/429c5250ede7ff4af3b6f37b39925cfa5afee278
102			- Add "" to wellknown path in config.sh
103
104			* Fri Feb 05 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-19
105			- updated letsencrypt.sh
106			- https://github.com/lukas2511/letsencrypt.sh/commit/21c18dd3b8c2572b894d9ec2e5c3fc2589f56f32
107
108			* Tue Jan 26 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-18
109			- updated letsencrypt.sh
110			- https://github.com/lukas2511/letsencrypt.sh/commit/79ff846e267c30d85988f79f58b81bc7bd91790c
111
112			* Sat Jan 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-17
113			- Fix typos in hook-script
114			- Add latest letsencrypt.sh script
115
116			* Wed Jan 20 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-16
117			- Minor fixes including typo in cron.daily
118
119			* Tue Jan 19 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-15
120			- Missed a "
121			- remove ' from Let's encrypt and add URL
122
123			* Tue Jan 19 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-14
124			- Updated readme and install notes
125			- Allow either domains or hosts
126
127			* Mon Jan 18 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-13
128			- Add missing templates.metadata file
129			- modify spec file wording
130
131			* Mon Jan 18 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-12
132			- Set hookscript to always run unless letsencrypt is disabled
133			- Add cron.daily script to console-save action and set perms
134
135			* Sun Jan 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-11
136			- Fix hook-script.sh perms using templates.metadata
137
138			* Sun Jan 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-10
139			- Add latest revision of letsencrypt.sh
140			- add hookscript.sh templates and various fixes
141
142			* Sat Jan 16 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-9
143			- Add latest revision of letsencrypt.sh
144
145			* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-8
146			- set +x on hook-script and correct file name in config
147
148			* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-7
149			- Add missing curly brace
150			- Move Status check line up so we can generate empty file if disabled
151
152			* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-6
153			- Add hookScript key
154
155			* Fri Jan 15 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-5
156			- Modify spec file to add paths and set permisssions
157
158			* Thu Jan 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-4
159			- Modify file paths and cron script
160
161			* Thu Jan 14 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-3
162			- updated bash script in spec file
163			- updated file locations in README.MD
164
165			* Wed Jan 13 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-2
166			- Moved config.sh file location
167			- added cron.daily template - only works if letsencrypt is enabled
168			- added check to create /etc/letsencrypt.sh directory if it does not exist
169			- added latest letsencrypt.sh script
170
171			* Thu Jan 07 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
172			- initial release
173
174			%prep
175			%setup
176	jcrisp	1.7	# patch0 -p1
177	unnilennium	1.1
178			%build
179			perl createlinks
180
181			%install
182			rm -rf $RPM_BUILD_ROOT
183			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
184			rm -f %{name}-%{version}-filelist
185			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
186			echo "%doc COPYING" >> %{name}-%{version}-filelist
187
188
189			%clean
190			cd ..
191			rm -rf %{name}-%{version}
192
193			%files -f %{name}-%{version}-filelist
194			%defattr(-,root,root)
195
196			%pre
197
198			%preun
199
200			%post
201	unnilennium	1.2	# if previously installed letsencrypt.sh, but first migration to dehydrated
202			if [[ -e /etc/letsencrypt.sh ]] && [[ ! -e /etc/dehydrated ]];
203			then
204			# assume in production
205			# CA="https://acme-v01.api.letsencrypt.org/directory" ;
206			# CAHASH="$(echo "${CA}" \| urlbase64)"
207			# mkdir /etc/dehydrated;
208			# mkdir -p /etc/dehydrated/accounts
209			# cp -a /etc/letsencrypt.sh/private_key.json /etc/dehydrated/accounts/${CAHASH}/registration_info.json
210			# cp -a /etc/letsencrypt.sh/private_key.pem /etc/dehydrated/accounts/${CAHASH}/account_key.pem
211			# cp -a /etc/letsencrypt.sh/certs /etc/dehydrated/
212			mv -f /etc/letsencrypt.sh /etc/letsencrypt.sh.old;
213			fi
214
215			# if letsencrypt still there but already migrated to dehydrated
216			if [[ -e /etc/letsencrypt.sh ]] && [[ -e /etc/dehydrated/certs ]];
217			then
218			mv -f /etc/letsencrypt.sh /etc/letsencrypt.sh.old;
219	unnilennium	1.1	fi
220
221	unnilennium	1.2	# if first installation of dehydrated
222	unnilennium	1.1	if [[ ! -e /etc/dehydrated ]];
223			then mkdir /etc/dehydrated;
224			fi
225
226			if [[ -f /usr/local/bin/config.sh ]];
227			then mv -f /usr/local/bin/config.sh /usr/local/bin/config.sh.orig;
228			fi
229
230			if [[ -f /usr/local/bin/config ]];
231			then mv -f /usr/local/bin/config /usr/local/bin/config.old;
232			fi
233
234			if [[ -f /usr/local/bin/domain.txt ]];
235			then mv -f /usr/local/bin/domains.txt /usr/local/bin/domains.txt.orig;
236			fi
237
238			if [[ ! -e /home/e-smith/files/ibays/Primary/html/.well-known/acme-challenge ]];
239			then mkdir -p /home/e-smith/files/ibays/Primary/html/.well-known/acme-challenge;
240			fi
241
242			chmod -R 0775 /home/e-smith/files/ibays/Primary/html/.well-known
243			chown -R apache:shared /home/e-smith/files/ibays/Primary/html/.well-known
244
245
246
247			%postun