feat: adds an option to remove sub-directories.

This commit is contained in:
Fernandez Ludovic 2019-02-20 04:58:46 +01:00
parent 7e63c722b8
commit b608309b9e
3 changed files with 31 additions and 11 deletions

View File

@ -11,6 +11,11 @@ import (
"github.com/xenolf/lego/registration" "github.com/xenolf/lego/registration"
) )
const (
certsSubDir = "certs"
keysSubDir = "private"
)
// StoredData represents the data managed by the Store // StoredData represents the data managed by the Store
type StoredData struct { type StoredData struct {
Account *Account Account *Account
@ -40,7 +45,7 @@ type Account struct {
KeyType certcrypto.KeyType KeyType certcrypto.KeyType
} }
func dump(acmeFile, dumpPath string, crtExt, keyExt string) error { func dump(acmeFile, dumpPath string, crtExt, keyExt string, subDir bool) error {
f, err := os.Open(acmeFile) f, err := os.Open(acmeFile)
if err != nil { if err != nil {
return err return err
@ -55,29 +60,29 @@ func dump(acmeFile, dumpPath string, crtExt, keyExt string) error {
return err return err
} }
err = os.MkdirAll(filepath.Join(dumpPath, "certs"), 0755) err = os.MkdirAll(filepath.Join(dumpPath, withSubDir(subDir, certsSubDir)), 0755)
if err != nil { if err != nil {
return err return err
} }
err = os.MkdirAll(filepath.Join(dumpPath, "private"), 0755) err = os.MkdirAll(filepath.Join(dumpPath, withSubDir(subDir, keysSubDir)), 0755)
if err != nil { if err != nil {
return err return err
} }
privateKeyPem := extractPEMPrivateKey(data.Account) privateKeyPem := extractPEMPrivateKey(data.Account)
err = ioutil.WriteFile(filepath.Join(dumpPath, "private", "letsencrypt"+keyExt), privateKeyPem, 0666) err = ioutil.WriteFile(filepath.Join(dumpPath, withSubDir(subDir, keysSubDir), "letsencrypt"+keyExt), privateKeyPem, 0666)
if err != nil { if err != nil {
return err return err
} }
for _, cert := range data.Certificates { for _, cert := range data.Certificates {
err = ioutil.WriteFile(filepath.Join(dumpPath, "private", cert.Domain.Main+keyExt), cert.Key, 0666) err = ioutil.WriteFile(filepath.Join(dumpPath, withSubDir(subDir, keysSubDir), cert.Domain.Main+keyExt), cert.Key, 0666)
if err != nil { if err != nil {
return err return err
} }
err = ioutil.WriteFile(filepath.Join(dumpPath, "certs", cert.Domain.Main+crtExt), cert.Certificate, 0666) err = ioutil.WriteFile(filepath.Join(dumpPath, withSubDir(subDir, certsSubDir), cert.Domain.Main+crtExt), cert.Certificate, 0666)
if err != nil { if err != nil {
return err return err
} }
@ -86,6 +91,13 @@ func dump(acmeFile, dumpPath string, crtExt, keyExt string) error {
return nil return nil
} }
func withSubDir(sub bool, name string) string {
if sub {
return name
}
return ""
}
func extractPEMPrivateKey(account *Account) []byte { func extractPEMPrivateKey(account *Account) []byte {
var block *pem.Block var block *pem.Block
switch account.KeyType { switch account.KeyType {

View File

@ -4,6 +4,7 @@ import (
"fmt" "fmt"
"log" "log"
"os" "os"
"strconv"
"github.com/spf13/cobra" "github.com/spf13/cobra"
) )
@ -25,8 +26,9 @@ func main() {
dumpPath := cmd.Flag("dest").Value.String() dumpPath := cmd.Flag("dest").Value.String()
crtExt := cmd.Flag("crt-ext").Value.String() crtExt := cmd.Flag("crt-ext").Value.String()
keyExt := cmd.Flag("key-ext").Value.String() keyExt := cmd.Flag("key-ext").Value.String()
subDir, _ := strconv.ParseBool(cmd.Flag("use-subdir").Value.String())
err := dump(acmeFile, dumpPath, crtExt, keyExt) err := dump(acmeFile, dumpPath, crtExt, keyExt, subDir)
if err != nil { if err != nil {
log.Fatal(err) log.Fatal(err)
} }
@ -35,8 +37,9 @@ func main() {
dumpCmd.Flags().String("source", "./acme.json", "Path to 'acme.json' file.") dumpCmd.Flags().String("source", "./acme.json", "Path to 'acme.json' file.")
dumpCmd.Flags().String("dest", "./dump", "Path to store the dump content.") dumpCmd.Flags().String("dest", "./dump", "Path to store the dump content.")
dumpCmd.Flags().String("crt-ext", ".crt", "The file extension of the generated certificates") dumpCmd.Flags().String("crt-ext", ".crt", "The file extension of the generated certificates.")
dumpCmd.Flags().String("key-ext", ".key", "The file extension of the generated private keys") dumpCmd.Flags().String("key-ext", ".key", "The file extension of the generated private keys.")
dumpCmd.Flags().Bool("use-subdir", true, "Use separated directories for certificates and keys.")
rootCmd.AddCommand(dumpCmd) rootCmd.AddCommand(dumpCmd)
var versionCmd = &cobra.Command{ var versionCmd = &cobra.Command{

View File

@ -29,11 +29,12 @@ Usage:
traefik-certs-dumper dump [flags] traefik-certs-dumper dump [flags]
Flags: Flags:
--crt-ext string The file extension of the generated certificates (default ".crt") --crt-ext string The file extension of the generated certificates. (default ".crt")
--dest string Path to store the dump content. (default "./dump") --dest string Path to store the dump content. (default "./dump")
-h, --help help for dump -h, --help help for dump
--key-ext string The file extension of the generated private keys (default ".key") --key-ext string The file extension of the generated private keys. (default ".key")
--source string Path to 'acme.json' file. (default "./acme.json") --source string Path to 'acme.json' file. (default "./acme.json")
--use-subdir Use separated directories for certificates and keys. (default true)
``` ```
## Examples ## Examples
@ -50,6 +51,10 @@ traefik-certs-dumper dump --source ./acme.json --dest ./dump
traefik-certs-dumper dump --crt-ext=.pem --key-ext=.pem traefik-certs-dumper dump --crt-ext=.pem --key-ext=.pem
``` ```
```bash
traefik-certs-dumper dump --use-subdir=false
```
- https://github.com/containous/traefik/issues/4381 - https://github.com/containous/traefik/issues/4381
- https://github.com/containous/traefik/issues/2418 - https://github.com/containous/traefik/issues/2418
- https://github.com/containous/traefik/issues/3847 - https://github.com/containous/traefik/issues/3847