diff options
| author | Daniel Baumann <daniel.baumann@open-infrastructure.net> | 2023-03-07 13:21:03 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@open-infrastructure.net> | 2023-05-19 13:55:05 +0000 |
| commit | 897ce776738fc55003ea7b30e9d7d94f447b38bf (patch) | |
| tree | 3cae01d4a6532477d91fd098d9ede7989037495a | |
| parent | Updating dehydrated todo. (diff) | |
| download | service-tools-897ce776738fc55003ea7b30e9d7d94f447b38bf.tar.xz service-tools-897ce776738fc55003ea7b30e9d7d94f447b38bf.zip | |
Adding preferred chain compatibility in deploy_cert.extra dehydrated hook.
Signed-off-by: Daniel Baumann <daniel.baumann@open-infrastructure.net>
| -rwxr-xr-x | dehydrated/share/hooks/deploy_cert.extra | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/dehydrated/share/hooks/deploy_cert.extra b/dehydrated/share/hooks/deploy_cert.extra index 56ca2f4..cd1d3b9 100755 --- a/dehydrated/share/hooks/deploy_cert.extra +++ b/dehydrated/share/hooks/deploy_cert.extra @@ -25,9 +25,22 @@ echo -n " + Creating extra certificate files..." DIRECTORY="$(dirname "${CERTFILE}")" +if [ "$(grep -c 'BEGIN CERTIFICATE' ${FULLCHAINFILE})" -ge 3 ] +then + # long chain + # - chain.pem: R3 | ISRG Root X1 + # - fullchain.pem: Certificate | R3 | ISRG Root X1 + PEMFILE="${CHAINFILE}" +else + # short chain + # - chain.pem: R3 + # - fullchain.pem: Certificate | R3 + PEMFILE="${FULLCHAINFILE}" +fi + # root and intermediate CA TMPFILE="$(mktemp -p "${DIRECTORY}" -u ca.XXXXXXXXXX)" -grep -Ev '^$' "${CHAINFILE}" | csplit -f "${TMPFILE}" -s -z - '/-----BEGIN CERTIFICATE-----/' '{*}' +grep -Ev '^$' "${PEMFILE}" | csplit -f "${TMPFILE}" -s -z - '/-----BEGIN CERTIFICATE-----/' '{*}' mv "${TMPFILE}00" "${DIRECTORY}/intermediate-${TIMESTAMP}.pem" ln -sf "${DIRECTORY}/intermediate-${TIMESTAMP}.pem" "${DIRECTORY}/intermediate.pem" |