main.go

package main

import (
	"log"
	"os"
	"strings"
	"time"

	"github.com/pkg/errors"
	"github.com/tuotoo/qiniu-auto-cert/acme"
	"github.com/tuotoo/qiniu-auto-cert/qiniu"
)

func main() {
	qnClient := qiniu.New(
		os.Getenv("QINIU_ACCESSKEY"),
		os.Getenv("QINIU_SECRETKEY"),
	)
	Domain := os.Args[1]
	Email := os.Args[2]
	if err := autoCert(qnClient, Domain, Email); err != nil {
		log.Println(err)
	}
	for range time.Tick(time.Hour * 3) {
		if err := autoCert(qnClient, Domain, Email); err != nil {
			log.Println(err)
		}
	}
}

func autoCert(qnClient *qiniu.Client, Domain, Email string) error {
	domainInfo, err := qnClient.GetDomainInfo(Domain)
	if err != nil {
		log.Fatalln(err)
	}
	if domainInfo.HTTPS.CertID != "" {
		info, err := qnClient.GetCertInfo(domainInfo.HTTPS.CertID)
		if err != nil {
			return errors.WithMessage(err, "get cert info failed")
		}
		if time.Until(info.Cert.NotAfter.Time) > time.Hour*24*30 {
			return nil
		}
		upload, err := obtainAndUploadCert(qnClient, Domain, Email)
		if err != nil {
			return errors.WithMessage(err, "obtain and upload cert failed")
		}
		_, err = qnClient.UpdateHttpsConf(Domain, upload.CertID)
		if err != nil {
			return errors.WithMessage(err, "update domain certID failed")
		}
		_, err = qnClient.DeleteCert(domainInfo.HTTPS.CertID)
		return errors.WithMessage(err, "delete cert failed")
	}
	upload, err := obtainAndUploadCert(qnClient, Domain, Email)
	if err != nil {
		return errors.WithMessage(err, "obtain and upload cert failed")
	}
	_, err = qnClient.DomainSSLize(Domain, upload.CertID)
	return errors.WithMessage(err, "sslize domain failed")
}

func obtainAndUploadCert(qnClient *qiniu.Client, Domain, Email string) (*qiniu.UploadCertResp, error) {
	cert, err := acme.ObtainCert(Email, Domain)
	if err != nil {
		return nil, err
	}
	upload, err := qnClient.UploadCert(qiniu.Cert{
		Name:       strings.Split(Domain, ".")[0],
		CommonName: Domain,
		CA:         string(cert.Certificate),
		Pri:        string(cert.PrivateKey),
	})
	if err != nil {
		return nil, err
	}
	return upload, nil
}