From f158caa2ebba77a343ca7badddba8395e822a609 Mon Sep 17 00:00:00 2001
From: David Kerr <david@kerr.net>
Date: Mon, 6 Feb 2017 21:49:20 -0500
Subject: [PATCH] Updates from code review

---
 deploy/sshdeploy.sh | 33 +++++++++++++++++++++------------
 1 file changed, 21 insertions(+), 12 deletions(-)

diff --git a/deploy/sshdeploy.sh b/deploy/sshdeploy.sh
index 55d248ca..e7ca78a8 100644
--- a/deploy/sshdeploy.sh
+++ b/deploy/sshdeploy.sh
@@ -3,7 +3,7 @@
 # Script to deploy certificates to remote server by SSH
 # Note that SSH must be able to login to remote host without a password...
 # SSH Keys must have been exchanged with the remote host.  Validate and
-# test that you can login to USER@URL from the host running acme.sh before
+# test that you can login to USER@SERVER from the host running acme.sh before
 # using this script.
 #
 # The following variables exported from environment will be used.
@@ -13,7 +13,8 @@
 #
 # The following examples are for QNAP NAS running QTS 4.2 
 # export ACME_DEPLOY_SSH_USER="admin"
-# export ACME_DEPLOY_SSH_URL="qnap"
+# export ACME_DEPLOY_SSH_SERVER="qnap"
+# export ACME_DEPLOY_SSH_PORT="22"
 # export ACME_DEPLOY_SSH_SERVICE_STOP=""
 # export ACME_DEPLOY_SSH_KEYFILE="/etc/stunnel/stunnel.pem"
 # export ACME_DEPLOY_SSH_CERTFILE="/etc/stunnel/stunnel.pem"
@@ -34,7 +35,7 @@ sshdeploy_deploy() {
   _cmdstr=""
   _homedir='~'
   _backupprefix="$_homedir/.acme_ssh_deploy/certs-backup"
-  _backupdir="$_backupprefix-$(date +%Y%m%d%H%M%S)"
+  _backupdir="$_backupprefix-$(_utc_date | tr ' ' '-')"
 
   if [ -f "$DOMAIN_CONF" ]; then
     # shellcheck disable=SC1090
@@ -58,15 +59,23 @@ sshdeploy_deploy() {
     _savedomainconf Le_Deploy_ssh_user "$Le_Deploy_ssh_user"
   fi
 
-  # URL is optional.  If not provided then use _cdomain
-  if [ -n "$ACME_DEPLOY_SSH_URL" ]; then
-    Le_Deploy_ssh_url="$ACME_DEPLOY_SSH_URL"
-    _savedomainconf Le_Deploy_ssh_url "$Le_Deploy_ssh_url"
-  elif [ -z "$Le_Deploy_ssh_url" ]; then
-    Le_Deploy_ssh_url="$_cdomain"
+  # SERVER is optional. If not provided then use _cdomain
+  if [ -n "$ACME_DEPLOY_SSH_SERVER" ]; then
+    Le_Deploy_ssh_server="$ACME_DEPLOY_SSH_SERVER"
+    _savedomainconf Le_Deploy_ssh_server "$Le_Deploy_ssh_server"
+  elif [ -z "$Le_Deploy_ssh_server" ]; then
+    Le_Deploy_ssh_server="$_cdomain"
   fi
 
-  _info "Deploy certificates to remote server $Le_Deploy_ssh_user@$Le_Deploy_ssh_url"
+  # PORT is optional. If not provided then use port 22
+  if [ -n "$ACME_DEPLOY_SSH_PORT" ]; then
+    Le_Deploy_ssh_port="$ACME_DEPLOY_SSH_PORT"
+    _savedomainconf Le_Deploy_ssh_port "$Le_Deploy_ssh_port"
+  elif [ -z "$Le_Deploy_ssh_port" ]; then
+    Le_Deploy_ssh_port="22"
+  fi
+
+  _info "Deploy certificates to remote server $Le_Deploy_ssh_user@$Le_Deploy_ssh_server on port $Le_Deploy_ssh_port"
 
   # SERVICE_STOP is optional.
   # If provided then this command will be executed on remote host.
@@ -190,7 +199,7 @@ sshdeploy_deploy() {
   _info "Submitting sequence of commands to remote server by ssh"
   # quotations in bash cmd below intended.  Squash travis spellcheck error
   # shellcheck disable=SC2029
-  ssh -T "$Le_Deploy_ssh_user@$Le_Deploy_ssh_url" bash -c "'$_cmdstr'"
+  ssh -T -p "$Le_Deploy_ssh_port" "$Le_Deploy_ssh_user@$Le_Deploy_ssh_server" sh -c "'$_cmdstr'"
 
-  return 0
+  return $?
 }