echo off
REM revalida a chave ssl

SET DOMINIO=esus.municipio.uf.gov.br
SET SENHA=senhadoseucertificado
SET FILEP12=%PROGRAMFILES%\e-SUS\webserver\config\esusaps.p12
SET FILEJKS=%PROGRAMFILES%\e-SUS\webserver\config\esusaps.jks
SET CERTBOT=c:\certbot\live\
echo "certbot renew"
certbot renew

echo %CERTBO%%DOMINIO%
cd %CERTBOT%%DOMINIO%

move %FILEJKS% %FILEJKS%.old

REM #VERSÃO OPENSSL 3
echo "openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out ****.p12 -name esusaps -passout pass:****"
openssl.exe pkcs12 -export -in fullchain.pem -inkey privkey.pem -out %FILEP12% -name "esusaps" -passout pass:%SENHA%
echo "gerando jks"
if exist %FILEJKS% (
    keytool.exe -delete -alias esusaps -keystore %FILEJKS% -storetype JKS -storepass %SENHA% 
)
keytool.exe -importkeystore -srckeystore %FILEP12% -srcstoretype PKCS12 -destkeystore %FILEJKS% -deststoretype JKS -deststorepass %SENHA% -srcstorepass %SENHA%


echo "Reiniciando o e-SUS"
net stop e-SUS-PEC
net start e-SUS-PEC
echo "Servidor iniciado"

echo on