| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586 |
- #!/usr/bin/env sh
- # Here is a script to deploy cert to edgio using its API
- # https://docs.edg.io/guides/v7/develop/rest_api/authentication
- # https://docs.edg.io/rest_api/#tag/tls-certs/operation/postConfigV01TlsCerts
- # This deployment required following variables
- # export EDGIO_CLIENT_ID="Your Edgio Client ID"
- # export EDGIO_CLIENT_SECRET="Your Edgio Client Secret"
- # export EDGIO_ENVIRONMENT_ID="Your Edgio Environment ID"
- # If have more than one Environment ID
- # export EDGIO_ENVIRONMENT_ID="ENVIRONMENT_ID_1 ENVIRONMENT_ID_2"
- # returns 0 means success, otherwise error.
- ######## Public functions #####################
- #domain keyfile certfile cafile fullchain
- edgio_deploy() {
- _cdomain="$1"
- _ckey="$2"
- _ccert="$3"
- _cca="$4"
- _cfullchain="$5"
-
- _debug _cdomain "$_cdomain"
- _debug _ckey "$_ckey"
- _debug _ccert "$_ccert"
- _debug _cca "$_cca"
- _debug _cfullchain "$_cfullchain"
- if [ -z "$EDGIO_CLIENT_ID" ]; then
- _err "EDGIO_CLIENT_ID is not defined."
- return 1
- else
- _savedomainconf EDGIO_CLIENT_ID "$EDGIO_CLIENT_ID"
- fi
- if [ -z "$EDGIO_CLIENT_SECRET" ]; then
- _err "EDGIO_CLIENT_SECRET is not defined."
- return 1
- else
- _savedomainconf EDGIO_CLIENT_SECRET "$EDGIO_CLIENT_SECRET"
- fi
- if [ -z "$EDGIO_ENVIRONMENT_ID" ]; then
- _err "EDGIO_ENVIRONMENT_ID is not defined."
- return 1
- else
- _savedomainconf EDGIO_ENVIRONMENT_ID "$EDGIO_ENVIRONMENT_ID"
- fi
-
- _info "Getting access token"
- _data="client_id=$EDGIO_CLIENT_ID&client_secret=$EDGIO_CLIENT_SECRET&grant_type=client_credentials&scope=app.config"
- _debug Get_access_token_data "$_data"
- _response=$(_post "$_data" "https://id.edgio.app/connect/token" "" "POST" "application/x-www-form-urlencoded" )
- _debug Get_access_token_response "$_response"
- _access_token=$(echo "$_response" | _json_decode | _egrep_o '"access_token":"[^"]*' | cut -d : -f 2 | tr -d '"')
- _debug _access_token "$_access_token"
- if [ -z "$_access_token" ]; then
- _err "Error in getting access token"
- return 1
- fi
- _info "Uploading certificate"
- string_ccert=$(sed 's/$/\\n/' "$_ccert" | tr -d '\n')
- string_cca=$(sed 's/$/\\n/' "$_cca" | tr -d '\n')
- string_key=$(sed 's/$/\\n/' "$_ckey" | tr -d '\n')
- for ENVIRONMENT_ID in $EDGIO_ENVIRONMENT_ID; do
- _data="{\"environment_id\":\"$ENVIRONMENT_ID\",\"primary_cert\":\"$string_ccert\",\"intermediate_cert\":\"$string_cca\",\"private_key\":\"$string_key\"}"
- _debug Upload_certificate_data "$_data"
- _H1="Authorization: Bearer $_access_token"
- _response=$(_post "$_data" "https://edgioapis.com/config/v0.1/tls-certs" "" "POST" "application/json")
- if _contains "$_response" "message"; then
- _err "Error in deploying $_cdomain certificate to Edgio ENVIRONMENT_ID $ENVIRONMENT_ID."
- _err "$_response"
- return 1
- fi
- _debug Upload_certificate_response "$_response"
- _info "Domain $_cdomain certificate successfully deployed to Edgio ENVIRONMENT_ID $ENVIRONMENT_ID."
- done
- return 0
- }
|