luke/ssl-update
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

update readme

Browse Source
This commit is contained in:
LuKe Tidd 2022-08-08 14:47:04 -04:00
parent 147926112c
commit f0cd9433de
2 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -14,14 +14,12 @@ given a service:
* log into firewall, block http for the given service * log into firewall, block http for the given service
* set permissions and ownership on new keys * set permissions and ownership on new keys
* perform service specific hooks * perform service specific hooks
* jellyfin: generating a pkcs12 key * jellyfin/plex: generate a pkcs12 key and
put it in the right place
All secrets are GPG encrypted and one password prompt allows for script access All secrets are GPG encrypted and one password prompt allows for script access
to all secrets necessary. to all secrets necessary.
State: State:
* Only jellyfin is tested and working * running for all services, no known bugs at this time
* Can only really test when keys come closer to expiring
* code is ugly, could be a nice class or something

4
update_cert.py
View File

@ -61,10 +61,10 @@ def firewall_mod(state, service, decrypt_pp):
log.info(f'env for fw: ssl_service: {service}') log.info(f'env for fw: ssl_service: {service}')
log.info(f'cmd to connect to firewall: "{" ".join(cmd)}"') log.info(f'cmd to connect to firewall: "{" ".join(cmd)}"')
p = pexpect.spawnu(' '.join(cmd)) p = pexpect.spawnu(' '.join(cmd))
res = p.expect([f"Enter passphrase for key '{router_key}':", res = p.expect([f'Enter passphrase for key "{router_key}":',
pexpect.TIMEOUT, pexpect.EOF]) pexpect.TIMEOUT, pexpect.EOF])
if res > 0: if res > 0:
sys.exit('Couldnt send decryption key to ssh.') sys.exit('Couldnt send decryption key to ssh.')
p.sendline(decrypt_pp) p.sendline(decrypt_pp)
res = p.expect(['success', pexpect.TIMEOUT, pexpect.EOF]) res = p.expect(['success', pexpect.TIMEOUT, pexpect.EOF])
if res > 0: if res > 0: