Creates a PFX cert using Let's Encrypt

create-pfx-cert.sh

#!/bin/bash

# Creates a PFX certificate using CertBot

# exit when any command fails
set -e

if [ "$1" == "" ] || [ "$2" = "" ]
then
      echo "Usage: pfxcert <domain> <output_filename>"
      exit 1
fi

certbot --text --agree-tos certonly \
    --manual \
    --preferred-challenges dns-01 \
    -d $1 \
    --manual-public-ip-logging-ok \
    --register-unsafely-without-email

# convert into a PFX with a generated password
PASSWORD=$(date +%s | sha256sum | base64 | head -c 32 ; echo)
openssl pkcs12 -export \
    -in /etc/letsencrypt/live/$1/fullchain.pem \
    -inkey /etc/letsencrypt/live/$1/privkey.pem \
    -out certs/$2.pfx \
    -passout pass:$PASSWORD

echo
echo "################################################"
echo "################################################"
echo "PFX password is $PASSWORD"
echo "################################################"
echo "################################################"

# setting permissions to original user
chown $SUDO_USER:$SUDO_USER certs/$2.pfx