From b059ac7e511c91a855d1bb56d0d7e2d2167d5d61 Mon Sep 17 00:00:00 2001
From: Andrew Cady <d@jerkface.net>
Date: Sun, 10 Apr 2016 17:03:09 -0400
Subject: Add option "--dry-run" to command "update"

---
 acme-certify.hs | 45 ++++++++++++++++++++++++++++-----------------
 1 file changed, 28 insertions(+), 17 deletions(-)

diff --git a/acme-certify.hs b/acme-certify.hs
index 14c4b70..3944e2a 100644
--- a/acme-certify.hs
+++ b/acme-certify.hs
@@ -91,7 +91,9 @@ data CertifyOpts = CertifyOpts {
 data UpdateOpts = UpdateOpts {
       updateConfigFile :: Maybe FilePath,
       updateHosts :: [String],
-      updateStaging :: Bool
+      updateStaging :: Bool,
+      updateDryRun :: Bool,
+      updateDoPrivisionCheck :: Bool
 }
 
 instance Show HttpProvisioner where
@@ -114,12 +116,24 @@ updateOpts = fmap Update $
                        metavar "FILENAME" <>
                        help "location of YAML configuration file"))
              <*> many (argument str (metavar "HOSTS"))
+             <*> stagingSwitch
              <*> switch
-                   (long "staging" <> help
+                   (long "dry-run" <> help
                                         (unwords
-                                           [ "Use staging servers instead of live servers"
-                                           , "(generated certificates will not be trusted!)"
+                                           [ "Do not fetch any certificates; only tests"
+                                           , "configuration file and http provisioning"
                                            ]))
+             <*> pure True
+
+-- TODO: global options
+stagingSwitch :: Parser Bool
+stagingSwitch =
+  switch
+    (long "staging" <> help
+                         (unwords
+                            [ "Use staging servers instead of live servers"
+                            , "(generated certificates will not be trusted!)"
+                            ]))
 
 certifyOpts :: Parser Command
 certifyOpts = fmap Certify $
@@ -150,12 +164,7 @@ certifyOpts = fmap Certify $
               <*> optional (strOption (long "terms" <> metavar "URL" <>
                                        help "The terms param of the registration request"))
               <*> switch (long "skip-dhparams" <> help "Don't generate DH params for combined cert")
-              <*> switch
-                    (long "staging" <> help
-                                         (unwords
-                                            [ "Use staging servers instead of live servers"
-                                            , "(generated certificates will not be trusted!)"
-                                            ]))
+              <*> stagingSwitch
               <*> switch
                     (long "skip-provision-check" <> help
                                                       (unwords
@@ -163,11 +172,6 @@ certifyOpts = fmap Certify $
                                                          , "making ACME requests"
                                                          ]))
 
--- lookup' :: (Monad m, FromJSON a) => Config.Key -> Config -> m a
-
-extractObject :: Config -> Object
-extractObject (Config _ o) = o
-
 runUpdate :: UpdateOpts -> IO ()
 runUpdate UpdateOpts { .. } = do
   issuerCert <- readX509 letsEncryptX1CrossSigned
@@ -195,20 +199,27 @@ runUpdate UpdateOpts { .. } = do
 
   let wantedCertSpecs = filter (wantUpdate . view _1) validCertSpecs & map (view _3)
 
-  when True $
+  when updateDoPrivisionCheck $
     forM_ wantedCertSpecs $ \spec ->
       forM_ (csDomains spec) $ uncurry canProvision >=>
         (`unless` error "Error: cannot provision files to web server")
 
+
   forM_ wantedCertSpecs $ \spec -> do
 
     let terms              = defaultTerms
         directoryUrl       = if updateStaging then stagingDirectoryUrl else liveDirectoryUrl
         email              = emailAddress $ encodeUtf8 . pack $ "root@" ++ (domainToString . fst . head) (csDomains spec)
-    print =<< fetchCertificate directoryUrl terms email issuerCert spec
 
+    if updateDryRun
+    then putStrLn $ "Dry run; would have fetched certificate: " ++ show spec
+    else print =<< fetchCertificate directoryUrl terms email issuerCert spec
 
   where
+    extractObject :: Config -> Object
+    extractObject (Config _ o) = o
+
+    wantUpdate :: String -> Bool
     wantUpdate h = null updateHosts || isJust (find (== h) updateHosts)
 
     dereference :: [(DomainName, Either DomainName HttpProvisioner)] -> Maybe [(DomainName, HttpProvisioner)]
-- 
cgit v1.2.3