forked from TrueCloudLab/lego
102 lines
2.4 KiB
Go
102 lines
2.4 KiB
Go
package api
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"errors"
|
|
"net"
|
|
"time"
|
|
|
|
"github.com/go-acme/lego/v4/acme"
|
|
)
|
|
|
|
// OrderOptions used to create an order (optional).
|
|
type OrderOptions struct {
|
|
NotBefore time.Time
|
|
NotAfter time.Time
|
|
// A string uniquely identifying a previously-issued certificate which this
|
|
// order is intended to replace.
|
|
// - https://datatracker.ietf.org/doc/html/draft-ietf-acme-ari-03#section-5
|
|
ReplacesCertID string
|
|
}
|
|
|
|
type OrderService service
|
|
|
|
// New Creates a new order.
|
|
func (o *OrderService) New(domains []string) (acme.ExtendedOrder, error) {
|
|
return o.NewWithOptions(domains, nil)
|
|
}
|
|
|
|
// NewWithOptions Creates a new order.
|
|
func (o *OrderService) NewWithOptions(domains []string, opts *OrderOptions) (acme.ExtendedOrder, error) {
|
|
var identifiers []acme.Identifier
|
|
for _, domain := range domains {
|
|
ident := acme.Identifier{Value: domain, Type: "dns"}
|
|
|
|
if net.ParseIP(domain) != nil {
|
|
ident.Type = "ip"
|
|
}
|
|
|
|
identifiers = append(identifiers, ident)
|
|
}
|
|
|
|
orderReq := acme.Order{Identifiers: identifiers}
|
|
|
|
if opts != nil {
|
|
if !opts.NotAfter.IsZero() {
|
|
orderReq.NotAfter = opts.NotAfter.Format(time.RFC3339)
|
|
}
|
|
|
|
if !opts.NotBefore.IsZero() {
|
|
orderReq.NotBefore = opts.NotBefore.Format(time.RFC3339)
|
|
}
|
|
|
|
if o.core.GetDirectory().RenewalInfo != "" {
|
|
orderReq.Replaces = opts.ReplacesCertID
|
|
}
|
|
}
|
|
|
|
var order acme.Order
|
|
resp, err := o.core.post(o.core.GetDirectory().NewOrderURL, orderReq, &order)
|
|
if err != nil {
|
|
return acme.ExtendedOrder{}, err
|
|
}
|
|
|
|
return acme.ExtendedOrder{
|
|
Order: order,
|
|
Location: resp.Header.Get("Location"),
|
|
}, nil
|
|
}
|
|
|
|
// Get Gets an order.
|
|
func (o *OrderService) Get(orderURL string) (acme.ExtendedOrder, error) {
|
|
if orderURL == "" {
|
|
return acme.ExtendedOrder{}, errors.New("order[get]: empty URL")
|
|
}
|
|
|
|
var order acme.Order
|
|
_, err := o.core.postAsGet(orderURL, &order)
|
|
if err != nil {
|
|
return acme.ExtendedOrder{}, err
|
|
}
|
|
|
|
return acme.ExtendedOrder{Order: order}, nil
|
|
}
|
|
|
|
// UpdateForCSR Updates an order for a CSR.
|
|
func (o *OrderService) UpdateForCSR(orderURL string, csr []byte) (acme.ExtendedOrder, error) {
|
|
csrMsg := acme.CSRMessage{
|
|
Csr: base64.RawURLEncoding.EncodeToString(csr),
|
|
}
|
|
|
|
var order acme.Order
|
|
_, err := o.core.post(orderURL, csrMsg, &order)
|
|
if err != nil {
|
|
return acme.ExtendedOrder{}, err
|
|
}
|
|
|
|
if order.Status == acme.StatusInvalid {
|
|
return acme.ExtendedOrder{}, order.Error
|
|
}
|
|
|
|
return acme.ExtendedOrder{Order: order}, nil
|
|
}
|