From dec01f1810fea2287bb2294909f1f2356cead487 Mon Sep 17 00:00:00 2001 From: Tim Kimber Date: Fri, 22 Nov 2019 18:39:36 +0000 Subject: [PATCH] Split fullchain into cert and ca cert --- getssl | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/getssl b/getssl index f3e60a4..e7646ba 100755 --- a/getssl +++ b/getssl @@ -855,7 +855,9 @@ get_certificate() { # get certificate for csr, if all domains validated. cd=$(curl --user-agent "$CURL_USERAGENT" --silent "$OrderLink") CertData=$(json_get "$cd" "certificate") debug "CertData is at $CertData" - curl --user-agent "$CURL_USERAGENT" --silent "$CertData" > "$CERT_FILE" + curl --user-agent "$CURL_USERAGENT" --silent "$CertData" > "$FULL_CHAIN" + info "Full certificate saved in $FULL_CHAIN" + awk -v CERT_FILE="$CERT_FILE" -v CA_CERT="$CA_CERT" 'BEGIN {outfile=CERT_FILE} split_after==1 {outfile=CA_CERT;split_after=0} /-----END CERTIFICATE-----/ {split_after=1} {print > outfile}' "$FULL_CHAIN" info "Certificate saved in $CERT_FILE" fi } @@ -1759,6 +1761,7 @@ ACCOUNT_KEY="${ACCOUNT_KEY:=$WORKING_DIR/account.key}" DOMAIN_STORAGE="${DOMAIN_STORAGE:=$WORKING_DIR}" DOMAIN_DIR="$DOMAIN_STORAGE/$DOMAIN" CERT_FILE="$DOMAIN_DIR/${DOMAIN}.crt" +FULL_CHAIN="$DOMAIN_DIR/fullchain.crt" CA_CERT="$DOMAIN_DIR/chain.crt" TEMP_DIR="$DOMAIN_DIR/tmp" if [[ "$os" == "mingw" ]]; then