add --insecure Do not check the server certificate, in some devices, the api server's certificate may not be trusted.

This commit is contained in:
neil 2016-06-20 18:35:40 +08:00
parent 8814a348a8
commit 13d7cae9e2
1 changed files with 16 additions and 1 deletions

17
acme.sh
View File

@ -985,6 +985,11 @@ _initpath() {
if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ] ; then if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ] ; then
CURL="$CURL --trace-ascii $dp " CURL="$CURL --trace-ascii $dp "
fi fi
if [ "$Le_Insecure" ] ; then
WGET="$WGET --no-check-certificate "
CURL="$CURL --insecure "
fi
_DEFAULT_ACCOUNT_KEY_PATH="$LE_WORKING_DIR/account.key" _DEFAULT_ACCOUNT_KEY_PATH="$LE_WORKING_DIR/account.key"
if [ -z "$ACCOUNT_KEY_PATH" ] ; then if [ -z "$ACCOUNT_KEY_PATH" ] ; then
@ -1765,7 +1770,11 @@ issue() {
Le_RenewalDays=80 Le_RenewalDays=80
else else
_savedomainconf "Le_RenewalDays" "$Le_RenewalDays" _savedomainconf "Le_RenewalDays" "$Le_RenewalDays"
fi fi
if [ "$Le_Insecure" ] ; then
_savedomainconf "Le_Insecure" "$Le_Insecure"
fi
Le_NextRenewTime=$(_math $Le_CertCreateTime + $Le_RenewalDays \* 24 \* 60 \* 60) Le_NextRenewTime=$(_math $Le_CertCreateTime + $Le_RenewalDays \* 24 \* 60 \* 60)
_savedomainconf "Le_NextRenewTime" "$Le_NextRenewTime" _savedomainconf "Le_NextRenewTime" "$Le_NextRenewTime"
@ -2421,6 +2430,7 @@ Parameters:
--tlsport Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer. --tlsport Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer.
--listraw Only used for '--list' command, list the certs in raw format. --listraw Only used for '--list' command, list the certs in raw format.
--stopRenewOnError, -se Only valid for '--renewall' command. Stop to renew all if one cert has error in renewal. --stopRenewOnError, -se Only valid for '--renewall' command. Stop to renew all if one cert has error in renewal.
--insecure Do not check the server certificate, in some devices, the api server's certificate may not be trusted.
" "
} }
@ -2474,6 +2484,7 @@ _process() {
_dnssleep="" _dnssleep=""
_listraw="" _listraw=""
_stopRenewOnError="" _stopRenewOnError=""
_insecure=""
while [ ${#} -gt 0 ] ; do while [ ${#} -gt 0 ] ; do
case "${1}" in case "${1}" in
@ -2705,6 +2716,10 @@ _process() {
--stopRenewOnError|--stoprenewonerror|-se ) --stopRenewOnError|--stoprenewonerror|-se )
_stopRenewOnError="1" _stopRenewOnError="1"
;; ;;
--insecure)
_insecure="1"
Le_Insecure="$_insecure"
;;
*) *)
_err "Unknown parameter : $1" _err "Unknown parameter : $1"
return 1 return 1