serverless-certificate-creator - npm Package Compare versions

Comparing version 1.2.0 to 1.3.0-rc-next.74

index.js

@@ -25,2 +25,8 @@ 'use strict';
       },
+      'remove-cert': {
+        usage: 'removes the certificate previously created by create-cert command',
+        lifecycleEvents: [
+          'remove'
+        ]
+      }
     };
@@ -32,2 +38,3 @@
       'after:info:info': this.certificateSummary.bind(this),
+      'remove-cert:remove': this.deleteCertificate.bind(this),
     };
@@ -229,2 +236,42 @@
 
+  /**
+   * Deletes the certificate for the given options set in serverless.yml under custom->customCertificate
+   * (if it exists)
+   */
+  deleteCertificate() {
+    this.initializeVariables();
+    if (!this.enabled) {
+      return this.reportDisabled();
+    }
+    this.serverless.cli.log(`Trying to delete certificate for ${this.domain} in ${this.region} ...`);
+    return this.getExistingCertificate().then(existingCert => {
+
+
+      if (!existingCert) {
+        this.serverless.cli.log(`Certificate for ${this.domain} in ${this.region} does not exist. Skipping ...`);
+        return;
+      }
+
+      let params = {
+        CertificateArn: existingCert.CertificateArn
+      };
+
+      return this.acm.describeCertificate(params).promise()
+        .then(certificate => this.deleteRecordSetForDnsValidation(certificate))
+        .then(() => this.acm.deleteCertificate(params).promise())
+        .then(() => this.serverless.cli.log(`deleted cert: ${existingCert.CertificateArn}`))
+        .catch(error => {
+          this.serverless.cli.log('could not delete cert', error);
+          console.log('problem', error);
+          throw error;
+        });
+
+
+    }).catch(error => {
+      this.serverless.cli.log('could not get certs', error);
+      console.log('problem', error);
+      throw error;
+    })
+  }
+
   waitUntilCertificateIsValidated(certificateArn) {
@@ -308,2 +355,89 @@ this.serverless.cli.log('waiting until certificate is validated...');
   /**
+   * deletes the record set required for validation type dns.
+   */
+  deleteRecordSetForDnsValidation(certificate) {
+    return this.getHostedZoneIds().then((hostedZoneIds) => {
+
+      return Promise.all(hostedZoneIds.map(({ hostedZoneId, Name }) => {
+
+        // Make sure the recordset exist before batching up a delete (in case they got manually deleted),
+        // otherwise the whole batch will fail
+        return this.listResourceRecordSets(hostedZoneId).then(existingRecords => {
+
+          let changes = certificate.Certificate.DomainValidationOptions
+            .filter(({DomainName}) => DomainName.endsWith(Name))
+            .map(opt => opt.ResourceRecord)
+            .filter(record => existingRecords.find(x => x.Name === record.Name && x.Type === record.Type))
+            .map(record => {
+                return {
+                Action: "DELETE",
+                ResourceRecordSet: {
+                  Name: record.Name,
+                  ResourceRecords: [
+                    {
+                      Value: record.Value
+                    }
+                  ],
+                  TTL: 60,
+                  Type: record.Type
+                }
+              }
+            });
+
+            if (changes.length === 0) {
+              this.serverless.cli.log('no matching dns validation record(s) found in route53');
+              return;
+            }
+
+            var params = {
+              ChangeBatch: {
+                Changes: changes
+              },
+              HostedZoneId: hostedZoneId
+            };
+            return this.route53.changeResourceRecordSets(params).promise().then(recordSetResult => {
+              this.serverless.cli.log(`${changes.length} dns validation record(s) deleted`);
+            }).catch(error => {
+              this.serverless.cli.log('could not delete record set(s) for dns validation', error);
+              console.log('problem', error);
+              throw error;
+            });
+          });
+      }));
+    });
+  }
+
+  /**
+   * Lists up all resource recordsets in the given route53 hosted zone.
+   */
+  listResourceRecordSets(hostedZoneId) {
+    var initialParams = {
+      HostedZoneId: hostedZoneId
+    }
+
+    this.serverless.cli.log('listing existing record sets in hosted zone', hostedZoneId);
+
+    let listRecords = (params) => this.route53.listResourceRecordSets(params).promise()
+      .then(({ ResourceRecordSets, IsTruncated, NextRecordName, NextRecordType, NextRecordIdentifier }) => {
+
+        if (IsTruncated) {
+          let listMoreParams = Object.assign(params, {
+            StartRecordName: NextRecordName,
+            StartRecordType: NextRecordType
+          });
+          // Resource record sets that have a routing policy other than simple, should not be the case for our DNS validation records
+          if (NextRecordIdentifier) {
+            listMoreParams = Object.assign(listMoreParams, { StartRecordIdentifier: NextRecordIdentifier });
+          }
+
+          return listRecords(listMoreParams).then(moreRecords => ResourceRecordSets.concat(moreRecords));
+        } else {
+          return ResourceRecordSets;
+        }
+      });
+
+    return listRecords(initialParams);
+  }
+
+  /**
    * Prints out a summary of all certificate related info
@@ -310,0 +444,0 @@ */

package.json

 {
   "name": "serverless-certificate-creator",
-  "version": "1.2.0",
+  "version": "1.3.0-rc-next.74",
   "description": "creates a certificate that can be used for custom domains for your api gateway",
@@ -5,0 +5,0 @@ "main": "index.js",

Readme.md

@@ -92,2 +92,6 @@ # serverless-certificate-creator
 
+To remove the certificate and delete the CNAME recordsets from route53, run:
+
+        serverless remove-cert
+
 # Combine with serverless-domain-manager
@@ -94,0 +98,0 @@

New alerts

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

28596

increased by20.32%

Lines of code

416

increased by38.21%

Number of lines in readme file

153

increased by2.68%

Worsened metrics

Number of low quality alerts

2

increased by100%

No dependency changes