Private/Update-PAOrder.ps1
|
function Update-PAOrder { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Position=0,ValueFromPipeline,ValueFromPipelineByPropertyName)] [string]$MainDomain, [switch]$SaveOnly ) Begin { # make sure we have an account configured if (!($acct = Get-PAAccount)) { throw "No ACME account configured. Run Set-PAAccount or New-PAAccount first." } } Process { # grab the order from explicit parameters or the current memory copy if (!$MainDomain) { if (!$script:Order -or !$script:Order.MainDomain) { Write-Warning "No ACME order configured. Run Set-PAOrder or specify a MainDomain." return } $order = $script:Order } else { # even if they specified the order explicitly, we may still be updating the # "current" order. So figure that out and set a flag for later. if ($script:Order -and $script:Order.MainDomain -and $script:Order.MainDomain -eq $MainDomain) { $order = $script:Order } else { $order = Get-PAOrder $MainDomain if ($null -eq $order) { Write-Warning "Specified order for $MainDomain was not found. Nothing to update." return } } } if (-not $SaveOnly -and (-not $order.expires -or (Get-DateTimeOffsetNow) -lt ([DateTimeOffset]::Parse($order.expires))) ) { Write-Debug "Refreshing order $($order.MainDomain)" # build the header $header = @{ alg = $acct.alg; kid = $acct.location; nonce = $script:Dir.nonce; url = $order.location; } # send the request try { $response = Invoke-ACME $header ([String]::Empty) $acct -EA Stop } catch { throw } Write-Debug "Response: $($response.Content)" $respObj = $response.Content | ConvertFrom-Json # update the things that could have changed $order.status = $respObj.status $order.expires = Repair-ISODate $respObj.expires if ($respObj.certificate) { $order.certificate = $respObj.certificate } } elseif (-not $SaveOnly) { # Let's Encrypt no longer returns order details for expired orders # https://github.com/letsencrypt/boulder/commit/83aafd18842e093483d6701b92419ca8f7f1855b # So don't bother asking if we know it's already expired. Write-Debug "Order $($order.MainDomain) is expired. Skipping server refresh." } # save it to disk $orderFolder = Join-Path $script:AcctFolder $order.MainDomain.Replace('*','!') $order | ConvertTo-Json | Out-File (Join-Path $orderFolder 'order.json') -Force -EA Stop } } |