More fine-grain control which certificates to update

[OidaTiftla]

Hi danb35,

I found your script and it was really helpful to me.

I made a small change, because I had the problem, that I use different certificates (because of different subdomains) for the different services: UI, webdav and ftp.

So I introduced a new setting called update_ui and renamed the two existing settings ftp_enabled -> update_ftp and webdav_enabled -> update_webdav. The rename was done because of readability (the services are enabled on my FreeNAS installation, but I wanted to select individually which certificate gets deployed to which service).

So my setup is the following:

• I have three configs (one for each service: UI, webdav and ftp) pointing to three different certificates
• I have three different calls:
  • /path/to/deploy_freenas.py --config /somewhere/else/deploy_config_ui
  • /path/to/deploy_freenas.py --config /somewhere/else/deploy_config_webdav
  • /path/to/deploy_freenas.py --config /somewhere/else/deploy_config_ftp

Please let me know if this is something you want to integrate into your version. And if you are okay with the new settings names, or if I should rename them to something else.

Thank you and have a nice day 😃

[danb35]

Pardon if this is a dumb question, but why not just put all three subdomains on the same certificate?

[OidaTiftla]

Okay, that's a very good question I've not thought about that 🙈

Thanks for this tipp, I'm closing this now.