add an acmetool hook

3 files changed, 36 insertions, 4 deletions

diff --git a/.SRCINFO b/.SRCINFO
index f0cdac0c3e3a..2d693a9a7207 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = netkit-telnet-ssl
 	pkgdesc = Telnet client and server with TLS support (Debian Netkit version)
 	pkgver = 0.17.41+0.2
-	pkgrel = 1
+	pkgrel = 2
 	url = http://www.hcs.harvard.edu/~dholland/computers/netkit.html
 	install = netkit-telnet-ssl.install
 	arch = i686
@@ -18,6 +18,7 @@ pkgbase = netkit-telnet-ssl
 	source = netkit-telnetd-ssl.socket
 	source = netkit-telnetd@.service
 	source = netkit-telnetd-ssl@.service
+	source = netkit-telnetd-ssl.acmetool.sh
 	sha256sums = 9c80d5c7838361a328fb6b60016d503def9ce53ad3c589f3b08ff71a2bb88e00
 	sha256sums = 3f8b155bc5085e37a0d836867af330f2911953055010e30f30ca46698559a0aa
 	sha256sums = 339308000345e294f0188c232bdb6cf4a22225db2efe188064f14caabd915ed4
@@ -26,6 +27,7 @@ pkgbase = netkit-telnet-ssl
 	sha256sums = a9a14476c43d65a57d50eec7e7d773ff1031cf1c13c12e84a9de5eaa14279434
 	sha256sums = 6e45cfed7968af48b59f172523934db421964e58fdb624872a831160e2848284
 	sha256sums = b4220954373f5431b127509b4344dad32d5c692871c536106507fa8b052ef40a
+	sha256sums = f59cab8283d1eb5982e74caa8cdb4536621ced36e399e746f6e203de3b60b9bc
 
 pkgname = netkit-telnet-ssl
 
diff --git a/PKGBUILD b/PKGBUILD
index 8a1cc4187183..d253fc109ec4 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ pkgname=netkit-telnet-ssl
 _debver=0.17.41+0.2
 _debrel=3
 pkgver=$_debver
-pkgrel=1
+pkgrel=2
 pkgdesc="Telnet client and server with TLS support (Debian Netkit version)"
 arch=('i686' 'x86_64')
 depends=('glibc' 'openssl' 'ncurses')
@@ -17,7 +17,8 @@ source=(https://deb.debian.org/debian/pool/main/n/${pkgname}/${pkgname}_${_debve
         netkit-telnet-ssl.arch.patch
         netkit-telnet-ssl.sysusers
         netkit-telnetd{,-ssl}.socket
-        netkit-telnetd{,-ssl}@.service)
+        netkit-telnetd{,-ssl}@.service
+        netkit-telnetd-ssl.acmetool.sh)
 sha256sums=('9c80d5c7838361a328fb6b60016d503def9ce53ad3c589f3b08ff71a2bb88e00'
             '3f8b155bc5085e37a0d836867af330f2911953055010e30f30ca46698559a0aa'
             '339308000345e294f0188c232bdb6cf4a22225db2efe188064f14caabd915ed4'
@@ -25,7 +26,8 @@ sha256sums=('9c80d5c7838361a328fb6b60016d503def9ce53ad3c589f3b08ff71a2bb88e00'
             '25a9cd6c6fd3dd50a20038c05d755c519be1081e42bcb148f71e7a8f182e91a2'
             'a9a14476c43d65a57d50eec7e7d773ff1031cf1c13c12e84a9de5eaa14279434'
             '6e45cfed7968af48b59f172523934db421964e58fdb624872a831160e2848284'
-            'b4220954373f5431b127509b4344dad32d5c692871c536106507fa8b052ef40a')
+            'b4220954373f5431b127509b4344dad32d5c692871c536106507fa8b052ef40a'
+            'f59cab8283d1eb5982e74caa8cdb4536621ced36e399e746f6e203de3b60b9bc')
 install=$pkgname.install
 
 prepare() {
@@ -66,6 +68,9 @@ package() {
     install -D -m 644 "$srcdir"/"$unit" \
                       "$pkgdir"/usr/lib/systemd/system/"$unit"
   done
+
+  install -D -m 755 "$srcdir"/netkit-telnetd-ssl.acmetool.sh \
+                    "$pkgdir"/etc/acme/hooks/netkit-telnetd-ssl
 }
 
 # cleanbuild: required
diff --git a/netkit-telnetd-ssl.acmetool.sh b/netkit-telnetd-ssl.acmetool.sh
new file mode 100755
index 000000000000..21df87fa8dc0
--- /dev/null
+++ b/netkit-telnetd-ssl.acmetool.sh
@@ -0,0 +1,25 @@
+#!/bin/sh
+set -e
+
+EVENT_NAME="$1"
+[ "$EVENT_NAME" = "live-updated" ] || exit 42
+
+[ "$ACME_STATE_DIR" ] || ACME_STATE_DIR="/var/lib/acme"
+[ "$TELNETD_PEM_FILE" ] || TELNETD_PEM_FILE="/etc/telnetd-ssl/telnetd.pem"
+[ "$TELNETD_CERT_NAME" ] || TELNETD_CERT_NAME="$(hostname -f)"
+
+[ -e "${TELNETD_PEM_FILE}.acmetool" ] || exit 0
+
+umask 0077
+while read name; do
+	[ "$name" = "$TELNETD_CERT_NAME" ] || continue
+
+	cert="$ACME_STATE_DIR/live/$name/fullchain"
+	pkey="$ACME_STATE_DIR/live/$name/privkey"
+
+	[ -f "$cert" ] && [ -f "$pkey" ] || continue
+
+	mkdir -p "${TELNETD_PEM_FILE%/*}"
+	cat "$pkey" "$cert" > "$TELNETD_PEM_FILE"
+	chown _telnetd: "$TELNETD_PEM_FILE"
+done