From 742efc1114a2350e98edc4abe66983e465cf0fc6 Mon Sep 17 00:00:00 2001 From: amartin-git <70332648+amartin-git@users.noreply.github.com> Date: Fri, 22 Oct 2021 10:30:33 -0400 Subject: [PATCH] Fix DOMAIN_CHAIN_LOCATION to copy correct file When FULL_CHAIN_INCLUDE_ROOT is set, DOMAIN_CHAIN_LOCATION was sending just the intermediate and server cert. Copying $FULL_CHAIN instead of $CERT_FILE+$CA_CERT fixes this. --- getssl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/getssl b/getssl index fc61831..66f6a36 100755 --- a/getssl +++ b/getssl @@ -438,7 +438,7 @@ cert_install() { # copy certs to the correct location (creating concatenated fi else to_location="${DOMAIN_CHAIN_LOCATION}" fi - cat "$CERT_FILE" "$CA_CERT" > "$TEMP_DIR/${DOMAIN}_chain.pem" + cat "$FULL_CHAIN" > "$TEMP_DIR/${DOMAIN}_chain.pem" copy_file_to_location "full chain" "$TEMP_DIR/${DOMAIN}_chain.pem" "$to_location" if [[ "$DUAL_RSA_ECDSA" == "true" ]]; then cat "${CERT_FILE%.*}.ec.crt" "${CA_CERT%.*}.ec.crt" > "$TEMP_DIR/${DOMAIN}_chain.pem.ec"