bin/make-cert, bin/fix-cert-chain: Hack certificate chains for compatiblity.
[distorted-letsencrypt] / bin / make-cert
CommitLineData
55799f78
MW
1#! /bin/sh
2set -e
93005620 3usage=" TAG"
c67523fe
MW
4prog=$(readlink -e "$0")
5. "${prog%/*}/../config.sh"
55799f78
MW
6. "$home/lib/lib.sh"
7
8run_as_user "$@"
9
10## Pick out the certificate tag.
11case $# in 0) fail_usage ;; esac
12tag=$1; shift
13case $# in 0) ;; *) fail_usage ;; esac
14
15prepare_tmp $tag
16
4bf2ac4f
MW
17## Make sure there's no proxy. I get `urn:acme:error:badNonce' with high
18## probability if I use IPv6, so avoid rolling the dice.
19unset http_proxy
20
8a0c5e38 21## Let's go.
08eee2f6
MW
22cert=$home/cert/$tag
23cd $cert
8a0c5e38 24dehydrated -f $HOME/dehydrated-config.sh -fc -s req >full-chain.new
66e6e0a3
MW
25fix-cert-chain full-chain.new >full-chain.fixed
26mv full-chain.fixed full-chain
27rm full-chain.new