Commit 79062c72 authored by Roman Lacko's avatar Roman Lacko Committed by root
Browse files

Generovani chain certifikatu

parent a297843a

le-renewed-cert

+32 −2
Original line number Diff line number Diff line
@@ -33,9 +33,12 @@ my $destdir = '/etc/pki/tls/certs'; 
# Co se ma spustit po instalaci certifikatu

my $post_cmd = 'apachectl -k graceful';



# regularni vyraz pro kontrolu retezce na base64url

# Regularni vyraz pro kontrolu retezce na base64url

my $valid_base64_url_re = qr(\A[a-zA-Z0-9_-]+\z);



# Ma se vytvorit i slozeny soubor (-chain.crt)?

my $create_chain = 1;



my $domain = <>;

chomp $domain;
@@ -53,7 +56,7 @@ while (<>) { 
}

close $cfh;



my $in_bundle = "$destdir/_in.$domain-chain.crt";

my $in_bundle = "$destdir/_in.$domain-bundle.crt";

unlink $in_bundle;

open my $bfh, '>', $in_bundle

	or die "Nejde otevrit $in_bundle: $!";
@@ -79,6 +82,33 @@ rename $in_certfile, "$destdir/$domain.crt" 
rename $in_bundle, "$destdir/$domain-bundle.crt"

	or die "Nelze prejmenovat $in_bundle na $domain-bundle.crt: $!";



if ($create_chain) {

    my $in_chain = "$destdir/_in.$domain-chain.crt";

    my @srcs = (

        "$destdir/$domain.crt",

        "$destdir/$domain-bundle.crt",

    );



    open my $cfh, '>', $in_chain

        or die "Nejde otevrit $in_chain: $!";



    foreach my $src (@srcs) {

        open my $fh_src, '<', $src

            or die "Nejde otevrit $in_chain pro cteni: $!";



        foreach (readline $fh_src) {

            print $cfh $_;

        }



        close $fh_src;

    }



    close $cfh;



    rename $in_chain, "$destdir/$domain-chain.crt"

        or die "Nelze prejmenovat $in_chain na $domain-chain.crt: $!";

}



# reload sluzeb, ktere pouzivaji certifikat

system $post_cmd;