Eigenes Zertifikat mit SSH - Webseitenanzeige?

#!/bin/bash
set -e
cd $(dirname $0)


python=/share/MD0_DATA/.qpkg/Entware-ng/bin/python


# do nothing if certificate is valid for more than 30 days (30*24*60*60)
echo "Checking whether to renew certificate on $(date -R)"
 # [ -s letsencrypt/cert.pem ] && openssl x509 -noout -in letsencrypt/cert.pem -checkend 2592000 && exit


checkPort=($(ps -e|awk '/SimpleHTTPServer/ {print $8}'))
if [ $checkPort = 80 ]; then 
pid=($(ps -e|awk '/SimpleHTTPServer/ {print $1}'))
kill $pid
fi


#domains=$(openssl req -in letsencrypt/domain.csr -noout -text| sed -n 's/DNS://gp'| sed -n 's/,//gp')
domainstr=$(openssl req -in letsencrypt/domain.csr -noout -text| sed -n 's/DNS://gp')
domains=(${domainstr//,/})
echo =========================================================================


for i in "${domains[@]}"
do
   if [[ $(wget -q -t 1 --spider --dns-timeout 3 --connect-timeout 10  $i:80; echo $?) -eq 0 ]]; then 
	echo -e "  \033[32m OK - Port 80 open\033[0m  "$i ; 
   else 
	echo -e  "\033[31m ERROR - Port 80 closed \033[0m  " $i" not available via port 80! check portforwarding - open port 80!"
	echo =========================================================================


	exit
   fi
done
echo ========================================================================




echo "Stopping Apache Webserver hogging port 80.."
/etc/init.d/Qthttpd.sh stop


mkdir -p tmp-webroot/.well-known/acme-challenge
cd tmp-webroot
$python -m SimpleHTTPServer 80 &
pid=$!
echo "Started python SimpleHTTPServer with pid $pid"
cd ..




echo "Renewing certificate..."
export SSL_CERT_FILE=cacert.pem


# own server certificate cert.pem
$python acme-tiny/acme_tiny.py --account-key letsencrypt/account.key --csr letsencrypt/domain.csr --acme-dir tmp-webroot/.well-known/acme-challenge > letsencrypt/cert.pem.temp 
#2> /var/log/acme_tiny.log


if [ -f letsencrypt/cert.pem.temp ] && [ -s letsencrypt/cert.pem.temp ] ; then
mv letsencrypt/cert.pem.temp letsencrypt/cert.pem


# intermediate certificate chain.pem
echo "Downloading intermediate certificate..."
wget --no-verbose -O - https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem > letsencrypt/chain.pem


# own server certificate (cert.pem) + intermediate certificate (chain.pem) => fullchain.pem
cat letsencrypt/cert.pem letsencrypt/chain.pem > letsencrypt/fullchain.pem


echo "Stopping stunnel and setting new stunnel certificates..."
/etc/init.d/stunnel.sh stop
#cat letsencrypt/keys/privkey.pem letsencrypt/fullchain.pem > /etc/stunnel/stunnel.pem


cat letsencrypt/keys/privkey.pem letsencrypt/cert.pem letsencrypt/chain.pem > /etc/stunnel/stunnel.pem
cp letsencrypt/chain.pem /etc/stunnel/uca.pem


echo "Done! Service startup and cleanup will follow now..."
/etc/init.d/stunnel.sh start


fi


kill -9 $pid || true
rm -rf tmp-webroot/.well-known/


/etc/init.d/Qthttpd.sh start