ticket:282: updateSSLcertCron.sh

#!/bin/bash

# Small script to run about once a month to update the letsencrypt
# ssl cert. This can save hundreds of dollars annually!
#
# Run from cron at 12:15 on the 5th of the month like this :
# 15 12 05 * * /root/updateSSLcerCron.sh |& mail -s "SSL certificate update on `hostname -f`" noien@nso.edu
#
# Niles Oien for Alisdair Davey, April 2018

# Make sure the script we run is there.
pn=`basename $0`
if [ ! -f ./certbot-auto ]
then
 echo $pn : Cert update script ./certbot-auto not found - exiting
 exit -1
fi

# See the date initially.
echo Initially, the date on the cert file is as follows :
/bin/ls -l /etc/letsencrypt/live/`hostname -f`/fullchain.pem

# Run it. Redirect output to a file due to weird escape char that messes up mail.
echo
echo $pn : Running certbot-auto
./certbot-auto --noninteractive renew &> certbot-auto.log
echo $pn : Done running certbot-auto, results in certbot-auto.log

# Having run it, print where to check it and the date on the cert.
echo
echo Now, date on the cert file is as follows :
/bin/ls -l /etc/letsencrypt/live/`hostname -f`/fullchain.pem
echo
echo Check your configuration \(remember to clear the cache\) at :
echo https://www.ssllabs.com/ssltest/analyze.html\?d=`hostname -f`
echo

exit 0