Add a subdirectory glob for pem-dir, allow use under frontend config sections

[dmz-uk]

Adds a new configuration option pem-dir-subdir-glob, which will (recursively) drag in matching subdirectories when scanning pem-dir. The semantics may not be great (matches directory name not full path), but it makes it a relatively simple change.

e.g.
pem-dir "/etc/hitch/pem.d"
pem-dir-subdir-glob "conf.d"
will also scan all subdirectories under /etc/hitch/pem.d named conf.d for pem files, "*" is generally more useful to include all subdirectories.

The change also allows pem-dir / pem-dir-glob / pem-dir-subdir-glob to be used inside frontend configuration sections.

[dmz-uk]

Couldn't replicate the test failure using gcc, but as reported elsewhere am getting test06-ticket-resume.sh failure on build with or without this change, which is a known issue?

[blakilox]

I tried for hours to get this to match pem files like
/etc/letsencrypt/live/myfirstdomain.com/hitch-bundle.pem
/etc/letsencrypt/live/myseconddomain.com/hitch-bundle.pem

for instance hitch.conf
pem-dir = "/etc/letsencrypt/live/"
pem-dir-glob = ".pem"
pem-dir-subdir-glob = ""

manually adding the pem file lines it works fine
It would be very nice if it could scan through the letsencrypt/live folder subdirectories for bundled pem files
Hmmm thanks

[dmz-uk]

I tried for hours to get this to match pem files like
/etc/letsencrypt/live/myfirstdomain.com/hitch-bundle.pem
/etc/letsencrypt/live/myseconddomain.com/hitch-bundle.pem

for instance hitch.conf
pem-dir = "/etc/letsencrypt/live/"
pem-dir-glob = ".pem" pem-dir-subdir-glob = ""

manually adding the pem file lines it works fine
It would be very nice if it could scan through the letsencrypt/live folder subdirectories for bundled pem files
Hmmm thanks

I don't know what to say -- we are using this and it scans subdirectories successfully, could it be the trailing /?

pem-dir = "/etc/letsencrypt/live"
pem-dir-glob = "*.pem"
pem-dir-subdir-glob="*"

[blakilox]

Thanks dmz-uk eventually I got it to work, as you advised above I needed that *.pem
I could not get it to match my hitch bundles until I renamed them with the domain name, this probably stands to reason
(it made more sense for me to create a post-hook script in letsencrypt to do that re-naming and have it put all the files into a single directory (I used etc/letsencrypt/active for my certs)
it did not need the training slash in the pem-dir
so I ended up with like
pem-dir = "/etc/letsencrypt/active"
pem-dir-glob = "star.pem"
(This editor seems not to let me put a star, lol )
Anyway Cheers for your help you pointed me the right way thanks