autoreplace selfsigned certificates with lets encrypt #5
Description
Check in Liveconfig for self-signed certificates (cn=cn) with a matching configured vhost.
Get the filename of the certificate, and find the matching private-key - we do need the privatekey from liveconfig, because we cannot save our own private-key to liveconfig, because it is stored encrypted.
Check is there is a www-subdomain configured for the domain.
Check if domain and subdomain are configured in the same package.
Check if domain and subdomain are configured to the same webroot.
If the domain is in the same packe and webroot, everything is ready.
If they are in the same packe, but not in the same webroot create a symlink for the ..well-known folder.
If the www-subdomain does not exist or is configured in a seperate packe, skip the subdomain.
If everything is ready, start certbot in webroot mode and provide it the private-key and the webroot.
Next update the cert, the issuer and the chain in liveconfig. The actual script will do the rest.