Beta Branch update Cloudflare Authenticated Origin Pull cert in 123.09beta01

update Cloudflare Authenticated Origin Pull cert in 123.09beta01

- add tools/cf-authenticated-origin-cert-update.sh to update all nginx vhosts' Cloudflare Authenticated Origin Pulls certificates located in /usr/local/nginx/conf/ssl/cloudflare
- add tools/cf-authenticated-origin-cert-update.sh cronjob to do update check every week on Friday run cmupdate, then run centmin.sh once to automatically add cronjob
- you can also manually run the update via command

Code (Text):

/usr/local/src/centminmod/tools/cf-authenticated-origin-cert-update.sh update

which will also automatically add cronjob if it isn't detected
- update cf auth origin cert link update in nginx vhost creation routines

Continue reading...

---

123.09beta01 branch

• Branch: centminmod/centminmod
• Commit History: centminmod/centminmod

 

related to @EckyBrazzz https://community.centminmod.com/threads/cloudflare-authenticated-origin-pulls-feature.18880/

example

Code (Text):

/usr/local/src/centminmod/tools/cf-authenticated-origin-cert-update.sh update
------------------------------
domain.com cloudflare authenticated origin cert expires in 23 days on 12 Jan 2020
updating domain.com cloudflare authenticated origin cert
at /usr/local/nginx/conf/ssl/cloudflare/domain.com/origin.crt
succesfully updated /usr/local/nginx/conf/ssl/cloudflare/domain.com/origin.crt
domain.com cloudflare authenticated origin cert now expires in 3604 days on 1 Nov 2029

 

ah need to add a check for this LOL

Code (Text):

/usr/local/src/centminmod/tools/cf-authenticated-origin-cert-update.sh update
no Cloudflare Authenticated Origin Pull Certs to update
at /usr/local/nginx/conf/ssl/cloudflare

 

what's output for this command

Code (Text):

cf_auth_origin_cert_dir='/usr/local/nginx/conf/ssl/cloudflare'
find ${cf_auth_origin_cert_dir} -type f -name 'origin.crt' -exec dirname {} \; 2>&1 | sed -e "s|${cf_auth_origin_cert_dir}/||g"

 

ah found the bug fixed now so cmupdate to update your code

 

the updater tool does a graceful nginx reload automatically

it also only updates if the CF Authenticated Origin Pull certs are less than 180 days from expiry date. So you're definitely going to have an nginx restart within that 180 day period for whatever reason anyway

 

see https://community.centminmod.com/th...d-origin-pulls-protecting-your-origins.13847/ as to why you would want to use and enable Cloudflare Authenticated Origin Pull certificates.