certman 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: dc3463ae829bfaef6897bb714c2489d113113465
-  data.tar.gz: 55623eb5f306caa72832a252a06125632344efc9
+  metadata.gz: 0e408e374e023b020b14823efde18c02ecda7e96
+  data.tar.gz: 974e04dcadccb2b152bcd06eb639ad59e2a4ba1e
 SHA512:
-  metadata.gz: 6fab1591da092475a654d4903b9984ec71f4c35b6f85ce69ff4bdfcde40123d3b53557e10f8450d2efff75d777da892542ff424107fecc1eb2b6a81aa42b031f
-  data.tar.gz: 285bae5e5f326b9b6d57e9d32dcf68b01461354ce63d0b3fed8599a68c49f45e67e28ebe3a8e12c1bdb3028537646efe857a6410a17551f758eccddc00a208e0
+  metadata.gz: 60fbd45d48957f144aa4a6e13d278f3da882fc66e50b26edcaaeccb3ad07d18fbd3d6bdec7402e6c1bb176b84672fa06da2001fcd69964c591996f283a6e241c
+  data.tar.gz: a4a22c9cd126403dd09c6b37af8d7f7debaee67ba8f6f64391f0597185c7fe98341fde19d4f0b867d8cb000f1c3913704b8f31b5f487c084707e1a939a4b0213

data/README.md

@@ -28,35 +28,42 @@ $ gem install certman
 
 ```sh
 $ certman request blog.example.com
-NOTICE! Certman support *us-east-1* only, now. OK? Yes
+NOTICE! Your selected region is *ap-northeast-1*. Certman create certificate on *ap-northeast-1*. OK? Yes
+NOTICE! Certman use *us-east-1* S3/SES. OK? Yes
 NOTICE! When requesting, Certman replace Active Receipt Rule Set. OK? Yes
-[✔] [ACM] Check Certificate (successfull)
-[✔] [Route53] Check Hosted Zone (successfull)
-[✔] [Route53] Check TXT Record (successfull)
-[✔] [Route53] Check MX Record (successfull)
-[✔] [S3] Create Bucket for SES inbound (successfull)
-[✔] [SES] Create Domain Identity (successfull)
-[✔] [Route53] Create TXT Record Set to verify Domain Identity (successfull)
-[✔] [SES] Check Domain Identity Status *verified* (successfull)
-[✔] [Route53] Create MX Record Set (successfull)
-[✔] [SES] Create Receipt Rule Set (successfull)
-[✔] [SES] Create Receipt Rule (successfull)
-[✔] [SES] Replace Active Receipt Rule Set (successfull)
-[✔] [ACM] Request Certificate (successfull)
-[✔] [S3] Check approval mail (will take about 30 min) (successfull)
-[✔] [SES] Revert Active Receipt Rule Set (successfull)
-[✔] [SES] Delete Receipt Rule (successfull)
-[✔] [SES] Delete Receipt Rule Set (successfull)
-[✔] [Route53] Delete MX Record Set (successfull)
-[✔] [Route53] Delete TXT Record Set (successfull)
-[✔] [SES] Delete Verified Domain Identiry (successfull)
-[✔] [S3] Delete Bucket (successfull)
+[✔] [ACM] Check Certificate (ap-northeast-1) (successfull)
+[✔] [Route53] Check Hosted Zone (ap-northeast-1) (successfull)
+[✔] [Route53] Check TXT Record (ap-northeast-1) (successfull)
+[✔] [Route53] Check MX Record (ap-northeast-1) (successfull)
+[✔] [S3] Create Bucket for SES inbound (us-east-1) (successfull)
+[✔] [SES] Create Domain Identity (us-east-1) (successfull)
+[✔] [Route53] Create TXT Record Set to verify Domain Identity (ap-northeast-1) (successfull)
+[✔] [SES] Check Domain Identity Status *verified* (us-east-1) (successfull)
+[✔] [Route53] Create MX Record Set (ap-northeast-1) (successfull)
+[✔] [SES] Create Receipt Rule Set (us-east-1) (successfull)
+[✔] [SES] Create Receipt Rule (us-east-1) (successfull)
+[✔] [SES] Replace Active Receipt Rule Set (us-east-1) (successfull)
+[✔] [ACM] Request Certificate (ap-northeast-1) (successfull)
+[✔] [S3] Check approval mail (will take about 30 min) (us-east-1) (successfull)
+[✔] [SES] Revert Active Receipt Rule Set (us-east-1) (successfull)
+[✔] [SES] Delete Receipt Rule (us-east-1) (successfull)
+[✔] [SES] Delete Receipt Rule Set (us-east-1) (successfull)
+[✔] [Route53] Delete MX Record Set (ap-northeast-1) (successfull)
+[✔] [Route53] Delete TXT Record Set (ap-northeast-1) (successfull)
+[✔] [SES] Delete Verified Domain Identiry (us-east-1) (successfull)
+[✔] [S3] Delete Bucket (us-east-1) (successfull)
 Done.
 
-certificate_arn: arn:aws:acm:us-east-1:0123456789:certificate/123abcd4-5e67-8f90-123a-4567bc89d01
+certificate_arn: arn:aws:acm:ap-northeast-1:0123456789:certificate/123abcd4-5e67-8f90-123a-4567bc89d01
 
 ```
 
+#### Remain Resources
+
+If you want to remain resources, use `--remain-resources` option.
+
+(see http://docs.aws.amazon.com/ja_jp/acm/latest/userguide/managed-renewal.html#how-manual-domain-validation-works)
+
 ### Delete Certificate
 
 ```sh

data/exe/certman

@@ -3,6 +3,5 @@
 require 'certman'
 
 Awsecrets.load
-Aws.config[:region] = 'us-east-1'
 
 Certman::CLI.start

data/lib/certman/cli.rb

@@ -5,7 +5,10 @@ module Certman
     def request(domain)
       pastel = Pastel.new
       prompt = TTY::Prompt.new
-      return unless prompt.yes?(pastel.red('NOTICE! Certman support *us-east-1* only, now. OK?'))
+      return unless prompt.yes?(pastel.red("NOTICE! Your selected region is *#{Aws.config[:region]}*. Certman create certificate on *#{Aws.config[:region]}*. OK?"))
+      unless ['us-east-1', 'us-west-2', 'eu-west-1'].include?(Aws.config[:region])
+        return unless prompt.yes?(pastel.red('NOTICE! Certman use *us-east-1* S3/SES. OK?'))
+      end
       return unless prompt.yes?(pastel.red('NOTICE! When requesting, Certman replace Active Receipt Rule Set. OK?'))
       client = Certman::Client.new(domain)
       Signal.trap(:INT) do

data/lib/certman/client.rb

@@ -16,44 +16,51 @@ module Certman
     def request(remain_resources = false)
       check_resource
 
-      step('[S3] Create Bucket for SES inbound', :s3_bucket) do
-        create_bucket
-      end
-
-      step('[SES] Create Domain Identity', :ses_domain_identity) do
-        create_domain_identity
+      enforce_region_to_us_east_1 do
+        step('[S3] Create Bucket for SES inbound', :s3_bucket) do
+          create_bucket
+        end
+        step('[SES] Create Domain Identity', :ses_domain_identity) do
+          create_domain_identity
+        end
       end
 
       step('[Route53] Create TXT Record Set to verify Domain Identity', :route53_txt) do
         create_txt_rset
       end
 
-      step('[SES] Check Domain Identity Status *verified*', nil) do
-        check_domain_identity_verified
+      enforce_region_to_us_east_1 do
+        step('[SES] Check Domain Identity Status *verified*', nil) do
+          check_domain_identity_verified
+        end
       end
 
       step('[Route53] Create MX Record Set', :route53_mx) do
         create_mx_rset
       end
 
-      step('[SES] Create Receipt Rule Set', :ses_rule_set) do
-        create_rule_set
-      end
+      enforce_region_to_us_east_1 do
+        step('[SES] Create Receipt Rule Set', :ses_rule_set) do
+          create_rule_set
+        end
 
-      step('[SES] Create Receipt Rule', :ses_rule) do
-        create_rule
-      end
+        step('[SES] Create Receipt Rule', :ses_rule) do
+          create_rule
+        end
 
-      step('[SES] Replace Active Receipt Rule Set', :ses_replace_active_rule_set) do
-        replace_active_rule_set
+        step('[SES] Replace Active Receipt Rule Set', :ses_replace_active_rule_set) do
+          replace_active_rule_set
+        end
       end
 
       step('[ACM] Request Certificate', :acm_certificate) do
         request_certificate
       end
 
-      step('[S3] Check approval mail (will take about 30 min)', nil) do
-        check_approval_mail
+      enforce_region_to_us_east_1 do
+        step('[S3] Check approval mail (will take about 30 min)', nil) do
+          check_approval_mail
+        end
       end
 
       cleanup_resources if !remain_resources || @do_rollback
@@ -93,6 +100,15 @@ module Certman
 
     private
 
+    def enforce_region_to_us_east_1
+      region = Aws.config[:region]
+      unless ['us-east-1', 'us-west-2', 'eu-west-1'].include?(Aws.config[:region])
+        Aws.config[:region] = 'us-east-1'
+      end
+      yield
+      Aws.config[:region] = region
+    end
+
     def step(message, save)
       return if @do_rollback
       s = spinner(message)
@@ -100,8 +116,10 @@ module Certman
         yield
         @savepoint.push(save)
         s.success
-      rescue
-        puts "Error: #{$ERROR_INFO}"
+      rescue => e
+        pastel = Pastel.new
+        puts ''
+        puts pastel.red("Error: #{e.message}")
         @do_rollback = true
         s.error
       end
@@ -111,13 +129,17 @@ module Certman
       @savepoint.reverse.each do |state|
         case state
         when :s3_bucket
-          s = spinner('[S3] Delete Bucket')
-          delete_bucket
-          s.success
+          enforce_region_to_us_east_1 do
+            s = spinner('[S3] Delete Bucket')
+            delete_bucket
+            s.success
+          end
         when :ses_domain_identity
-          s = spinner('[SES] Delete Verified Domain Identiry')
-          delete_domain_identity
-          s.success
+          enforce_region_to_us_east_1 do
+            s = spinner('[SES] Delete Verified Domain Identiry')
+            delete_domain_identity
+            s.success
+          end
         when :route53_txt
           s = spinner('[Route53] Delete TXT Record Set')
           delete_txt_rset
@@ -127,17 +149,23 @@ module Certman
           delete_mx_rset
           s.success
         when :ses_rule_set
-          s = spinner('[SES] Delete Receipt Rule Set')
-          delete_rule_set
-          s.success
+          enforce_region_to_us_east_1 do
+            s = spinner('[SES] Delete Receipt Rule Set')
+            delete_rule_set
+            s.success
+          end
         when :ses_rule
-          s = spinner('[SES] Delete Receipt Rule')
-          delete_rule
-          s.success
+          enforce_region_to_us_east_1 do
+            s = spinner('[SES] Delete Receipt Rule')
+            delete_rule
+            s.success
+          end
         when :ses_replace_active_rule_set
-          s = spinner('[SES] Revert Active Receipt Rule Set')
-          revert_active_rue_set
-          s.success
+          enforce_region_to_us_east_1 do
+            s = spinner('[SES] Revert Active Receipt Rule Set')
+            revert_active_rue_set
+            s.success
+          end
         end
       end
     end

data/lib/certman/log.rb

@@ -2,7 +2,7 @@ module Certman
   class Log
     def initialize(message)
       @pastel = Pastel.new
-      @s = TTY::Spinner.new("[:spinner] #{message}", output: $stdout)
+      @s = TTY::Spinner.new("[:spinner] #{message} (#{Aws.config[:region]})", output: $stdout)
       @s.auto_spin
     end
 

data/lib/certman/version.rb

@@ -1,3 +1,3 @@
 module Certman
-  VERSION = '0.2.0'
+  VERSION = '0.3.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: certman
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - k1LoW
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-03-26 00:00:00.000000000 Z
+date: 2017-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk