Use allchain instead of ca an cert, add documentation after review

This commit is contained in:
Pål Håland
2018-03-26 22:00:01 +02:00
parent d698c1093a
commit 8d38cf4d1f
2 changed files with 18 additions and 10 deletions

View File

@@ -32,10 +32,8 @@ routeros_deploy() {
_info "Trying to push key '$_ckey' to router"
scp "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key"
_info "Trying to push cert '$_ccert' to router"
scp "$_ccert" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer"
_info "Trying to push ca cert '$_cca' to router"
scp "$_cca" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.ca"
_info "Trying to push cert '$_cfullchain' to router"
scp "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer"
# shellcheck disable=SC2029
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" bash -c "'
@@ -43,24 +41,18 @@ routeros_deploy() {
/certificate remove $_cdomain.cer_1
/certificate remove $_cdomain.ca_0
delay 1
/certificate import file-name=$_cdomain.cer passphrase=\"\"
/certificate import file-name=$_cdomain.key passphrase=\"\"
/certificate import file-name=$_cdomain.ca passphrase=\"\"
delay 1
/file remove $_cdomain.cer
/file remove $_cdomain.key
/file remove $_cdomain.ca
delay 2
/ip service set www-ssl certificate=$_cdomain.cer_0