bin/make-cert, le-root.cert: Actually make certificates.

[distorted-letsencrypt] / bin / make-cert

diff --git a/bin/make-cert b/bin/make-cert
index 8c5605b..b6a86df 100755 (executable)
--- a/bin/make-cert
+++ b/bin/make-cert
@@ -1,5 +1,6 @@
 #! /bin/sh
 set -e
+usage=" TAG"
 . "${0%/*}/../config.sh"
 . "$home/lib/lib.sh"
 
@@ -13,7 +14,8 @@ case $# in 0) ;; *) fail_usage ;; esac
 prepare_tmp $tag
 
 ## Get started.
-cd $home/cert/$tag
+cert=$home/cert/$tag
+cd $cert
 openssl req -in req -out $tmp/req.der -outform der
 sans=$(openssl req -in req -text -noout |
        sed -n '
@@ -27,4 +29,10 @@ sans=$(openssl req -in req -text -noout |
          }')
 make_le_conf $sans
 
-cat "$tmp/le.conf"
+cd $tmp
+$home/letsencrypt/letsencrypt-auto -c "$tmp/le.conf" --text \
+       -a webroot --csr $tmp/req.der certonly
+
+cd $cert
+cat $tmp/0001_chain.pem $home/le-root.cert >full-chain.new
+mv full-chain.new full-chain