Let’s Encrypt

letsencrypt-renew-certificates.sh

#!/bin/bash

valid_days=5
cert_dir='/home/cgmeiner/.config/letsencrypt/live'
cert_file='cert.pem'
domains='www.christian-gmeiner.info'

export PATH=/usr/local/bin/:$PATH

for domain in $domains; do
   # find all certificates
   export cert="$(find $cert_dir/$domain/ -iname $cert_file | sort -k1)"
   # check certificate validation date
   openssl x509 -checkend $(( $valid_days * 86400 )) -in "$cert" > /dev/null
   # renew certifiacates if they are only 5 more days valid
   if [ $? != 0 ]; then
      letsencrypt certonly
      uberspace-prepare-certificate -k $cert_dir/$domain/privkey.pem -c $cert_dir/$domain/$cert_file
   fi
done