Check certificate issuer
This commit is contained in:
@@ -13,6 +13,13 @@ start_letsencrypt() {
|
|||||||
|
|
||||||
/usr/local/bin/acme.sh -m $email --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /acme.sh/$DOMAIN/cert.pem --key-file /acme.sh/$DOMAIN/key.pem --fullchain-file /acme.sh/$DOMAIN/fullchain.pem
|
/usr/local/bin/acme.sh -m $email --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /acme.sh/$DOMAIN/cert.pem --key-file /acme.sh/$DOMAIN/key.pem --fullchain-file /acme.sh/$DOMAIN/fullchain.pem
|
||||||
|
|
||||||
|
# Check certificate issuer
|
||||||
|
ISSUER=$(openssl x509 -in /etc/ssl/keys/launchpad.staging.galaxis.xyz/fullchain.pem -text -noout |grep -w CN |grep Issuer | cut -d '=' -f2);
|
||||||
|
SUBJECT=$(openssl x509 -in /etc/ssl/keys/launchpad.staging.galaxis.xyz/fullchain.pem -text -noout |grep -w CN |grep Subject | cut -d '=' -f2);
|
||||||
|
if [ "$ISSUER" == "$SUBJECT" ]; then
|
||||||
|
echo "Self signed certificate found";
|
||||||
|
/usr/local/bin/acme.sh -m $email --force --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /acme.sh/$DOMAIN/cert.pem --key-file /acme.sh/$DOMAIN/key.pem --fullchain-file /acme.sh/$DOMAIN/fullchain.pem
|
||||||
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
LETSENCRYPT_FILE=$(find /acme.sh/ -type f -name letsencrypt);
|
LETSENCRYPT_FILE=$(find /acme.sh/ -type f -name letsencrypt);
|
||||||
|
Reference in New Issue
Block a user