| 
				
			 | 
			
			
				@@ -156,26 +156,33 @@ function check_certificates { 
			 | 
		
	
		
			
			| 
				156
			 | 
			
				156
			 | 
			
			
				         USE_LETSENCRYPT=$2 
			 | 
		
	
		
			
			| 
				157
			 | 
			
				157
			 | 
			
			
				     fi 
			 | 
		
	
		
			
			| 
				158
			 | 
			
				158
			 | 
			
			
				     if [[ $USE_LETSENCRYPT == 'no' ]]; then 
			 | 
		
	
		
			
			| 
				159
			 | 
			
				
			 | 
			
			
				-        if [ ! -f /etc/ssl/private/$1.key ]; then 
			 | 
		
	
		
			
			| 
				160
			 | 
			
				
			 | 
			
			
				-            echo $"Private certificate for $CHECK_HOSTNAME was not created" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				159
			 | 
			
			
				+        if [ ! -f /etc/ssl/private/${1}.key ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				160
			 | 
			
			
				+            echo $"Private certificate for ${CHECK_HOSTNAME} was not created" 
			 | 
		
	
		
			
			| 
				161
			 | 
			
				161
			 | 
			
			
				             exit 63959 
			 | 
		
	
		
			
			| 
				162
			 | 
			
				162
			 | 
			
			
				         fi 
			 | 
		
	
		
			
			| 
				163
			 | 
			
				
			 | 
			
			
				-        if [ ! -f /etc/ssl/certs/$1.crt ]; then 
			 | 
		
	
		
			
			| 
				164
			 | 
			
				
			 | 
			
			
				-            echo $"Public certificate for $CHECK_HOSTNAME was not created" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				163
			 | 
			
			
				+        if [ ! -f /etc/ssl/certs/${1}.crt ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				164
			 | 
			
			
				+            echo $"Public certificate for ${CHECK_HOSTNAME} was not created" 
			 | 
		
	
		
			
			| 
				165
			 | 
			
				165
			 | 
			
			
				             exit 7679 
			 | 
		
	
		
			
			| 
				166
			 | 
			
				166
			 | 
			
			
				         fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				167
			 | 
			
			
				+ 
			 | 
		
	
		
			
			| 
				
			 | 
			
				168
			 | 
			
			
				+        if grep -q "${1}.pem" /etc/nginx/sites-available/${1}; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				169
			 | 
			
			
				+            sed -i "s|${1}.pem|${1}.crt|g" /etc/nginx/sites-available/${1} 
			 | 
		
	
		
			
			| 
				
			 | 
			
				170
			 | 
			
			
				+        fi 
			 | 
		
	
		
			
			| 
				167
			 | 
			
				171
			 | 
			
			
				     else 
			 | 
		
	
		
			
			| 
				168
			 | 
			
				172
			 | 
			
			
				         if [ ! -f /etc/letsencrypt/live/${1}/privkey.pem ]; then 
			 | 
		
	
		
			
			| 
				169
			 | 
			
				
			 | 
			
			
				-            echo $"Private certificate for $CHECK_HOSTNAME was not created" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				173
			 | 
			
			
				+            echo $"Private certificate for ${CHECK_HOSTNAME} was not created" 
			 | 
		
	
		
			
			| 
				170
			 | 
			
				174
			 | 
			
			
				             exit 6282 
			 | 
		
	
		
			
			| 
				171
			 | 
			
				175
			 | 
			
			
				         fi 
			 | 
		
	
		
			
			| 
				172
			 | 
			
				176
			 | 
			
			
				         if [ ! -f /etc/letsencrypt/live/${1}/fullchain.pem ]; then 
			 | 
		
	
		
			
			| 
				173
			 | 
			
				
			 | 
			
			
				-            echo $"Public certificate for $CHECK_HOSTNAME was not created" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				177
			 | 
			
			
				+            echo $"Public certificate for ${CHECK_HOSTNAME} was not created" 
			 | 
		
	
		
			
			| 
				174
			 | 
			
				178
			 | 
			
			
				             exit 5328 
			 | 
		
	
		
			
			| 
				175
			 | 
			
				179
			 | 
			
			
				         fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				180
			 | 
			
			
				+        if grep -q "${1}.crt" /etc/nginx/sites-available/${1}; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				181
			 | 
			
			
				+            sed -i "s|${1}.crt|${1}.pem|g" /etc/nginx/sites-available/${1} 
			 | 
		
	
		
			
			| 
				
			 | 
			
				182
			 | 
			
			
				+        fi 
			 | 
		
	
		
			
			| 
				176
			 | 
			
				183
			 | 
			
			
				     fi 
			 | 
		
	
		
			
			| 
				177
			 | 
			
				
			 | 
			
			
				-    if [ ! -f /etc/ssl/certs/$1.dhparam ]; then 
			 | 
		
	
		
			
			| 
				178
			 | 
			
				
			 | 
			
			
				-        echo $"Diffie–Hellman parameters for $CHECK_HOSTNAME were not created" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				184
			 | 
			
			
				+    if [ ! -f /etc/ssl/certs/${1}.dhparam ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				185
			 | 
			
			
				+        echo $"Diffie–Hellman parameters for ${CHECK_HOSTNAME} were not created" 
			 | 
		
	
		
			
			| 
				179
			 | 
			
				186
			 | 
			
			
				         exit 5989 
			 | 
		
	
		
			
			| 
				180
			 | 
			
				187
			 | 
			
			
				     fi 
			 | 
		
	
		
			
			| 
				181
			 | 
			
				188
			 | 
			
			
				 } 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -190,26 +197,26 @@ function create_site_certificate { 
			 | 
		
	
		
			
			| 
				190
			 | 
			
				197
			 | 
			
			
				     fi 
			 | 
		
	
		
			
			| 
				191
			 | 
			
				198
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				192
			 | 
			
				199
			 | 
			
			
				     if [[ $ONION_ONLY == "no" ]]; then 
			 | 
		
	
		
			
			| 
				193
			 | 
			
				
			 | 
			
			
				-        if [ ! -f /etc/ssl/certs/$SITE_DOMAIN_NAME.dhparam ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				200
			 | 
			
			
				+        if [ ! -f /etc/ssl/certs/${SITE_DOMAIN_NAME}.dhparam ]; then 
			 | 
		
	
		
			
			| 
				194
			 | 
			
				201
			 | 
			
			
				             if [[ $LETSENCRYPT_ENABLED != "yes" ]]; then 
			 | 
		
	
		
			
			| 
				195
			 | 
			
				
			 | 
			
			
				-                ${PROJECT_NAME}-addcert -h $SITE_DOMAIN_NAME --dhkey $DH_KEYLENGTH 
			 | 
		
	
		
			
			| 
				
			 | 
			
				202
			 | 
			
			
				+                ${PROJECT_NAME}-addcert -h ${SITE_DOMAIN_NAME} --dhkey ${DH_KEYLENGTH} 
			 | 
		
	
		
			
			| 
				196
			 | 
			
				203
			 | 
			
			
				                 function_check check_certificates 
			 | 
		
	
		
			
			| 
				197
			 | 
			
				
			 | 
			
			
				-                check_certificates $SITE_DOMAIN_NAME 
			 | 
		
	
		
			
			| 
				
			 | 
			
				204
			 | 
			
			
				+                check_certificates ${SITE_DOMAIN_NAME} 
			 | 
		
	
		
			
			| 
				198
			 | 
			
				205
			 | 
			
			
				             else 
			 | 
		
	
		
			
			| 
				199
			 | 
			
				
			 | 
			
			
				-                ${PROJECT_NAME}-addcert -e $SITE_DOMAIN_NAME -s $LETSENCRYPT_SERVER --dhkey $DH_KEYLENGTH --email $MY_EMAIL_ADDRESS 
			 | 
		
	
		
			
			| 
				
			 | 
			
				206
			 | 
			
			
				+                ${PROJECT_NAME}-addcert -e ${SITE_DOMAIN_NAME} -s ${LETSENCRYPT_SERVER} --dhkey ${DH_KEYLENGTH} --email ${MY_EMAIL_ADDRESS} 
			 | 
		
	
		
			
			| 
				200
			 | 
			
				207
			 | 
			
			
				                 if [ ! "$?" = "0" ]; then 
			 | 
		
	
		
			
			| 
				201
			 | 
			
				
			 | 
			
			
				-                    if [[ $NO_SELF_SIGNED == 'no' ]]; then 
			 | 
		
	
		
			
			| 
				202
			 | 
			
				
			 | 
			
			
				-                        echo $"Lets Encrypt failed for $SITE_DOMAIN_NAME, so try making a self-signed cert" 
			 | 
		
	
		
			
			| 
				203
			 | 
			
				
			 | 
			
			
				-                        ${PROJECT_NAME}-addcert -h $SITE_DOMAIN_NAME --dhkey $DH_KEYLENGTH 
			 | 
		
	
		
			
			| 
				
			 | 
			
				208
			 | 
			
			
				+                    if [[ ${NO_SELF_SIGNED} == 'no' ]]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				209
			 | 
			
			
				+                        echo $"Lets Encrypt failed for ${SITE_DOMAIN_NAME}, so try making a self-signed cert" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				210
			 | 
			
			
				+                        ${PROJECT_NAME}-addcert -h ${SITE_DOMAIN_NAME} --dhkey ${DH_KEYLENGTH} 
			 | 
		
	
		
			
			| 
				204
			 | 
			
				211
			 | 
			
			
				                         function_check check_certificates 
			 | 
		
	
		
			
			| 
				205
			 | 
			
				
			 | 
			
			
				-                        check_certificates $SITE_DOMAIN_NAME 
			 | 
		
	
		
			
			| 
				
			 | 
			
				212
			 | 
			
			
				+                        check_certificates ${SITE_DOMAIN_NAME} 
			 | 
		
	
		
			
			| 
				206
			 | 
			
				213
			 | 
			
			
				                     else 
			 | 
		
	
		
			
			| 
				207
			 | 
			
				214
			 | 
			
			
				                         echo $"Lets Encrypt failed for $SITE_DOMAIN_NAME" 
			 | 
		
	
		
			
			| 
				208
			 | 
			
				215
			 | 
			
			
				                         exit 682529 
			 | 
		
	
		
			
			| 
				209
			 | 
			
				216
			 | 
			
			
				                     fi 
			 | 
		
	
		
			
			| 
				210
			 | 
			
				217
			 | 
			
			
				                 else 
			 | 
		
	
		
			
			| 
				211
			 | 
			
				218
			 | 
			
			
				                     function_check check_certificates 
			 | 
		
	
		
			
			| 
				212
			 | 
			
				
			 | 
			
			
				-                    check_certificates $SITE_DOMAIN_NAME 'yes' 
			 | 
		
	
		
			
			| 
				
			 | 
			
				219
			 | 
			
			
				+                    check_certificates ${SITE_DOMAIN_NAME} 'yes' 
			 | 
		
	
		
			
			| 
				213
			 | 
			
				220
			 | 
			
			
				                 fi 
			 | 
		
	
		
			
			| 
				214
			 | 
			
				221
			 | 
			
			
				             fi 
			 | 
		
	
		
			
			| 
				215
			 | 
			
				222
			 | 
			
			
				         fi 
			 |