sh 读取由StartSSL颁发的SSL证书并将中间证书捆绑到其中，以便它可以在任何地方使用

Posted 2021-05-07

#!/bin/bash
set -eo pipefail

cert_file="$1"

if [ -z "$cert_file" ]; then
  echo "Usage: create-startssl-cert-bundle CERTIFICATE_FILE" >&2
  echo >&2
  echo "Bundles StartSSL's intermediate certs and writes combined certificate to stdout" >&2
  exit 1
fi

matched_url="$(openssl x509 -in "$cert_file" -noout -text \
  | grep --only-matching --extended 'http://aia\.startssl\.com/certs/sub\.class(1|2)\.server\.ca\.crt')"

if [ -z "$matched_url" ]; then
  echo "This doesn't look like a StartSSL certificate" >&2
  exit 1
fi

cert_url="${matched_url%.crt}.pem"

# Read only first certificate out of file
sed '/--END CERTIFICATE--/q' "$cert_file"

curl --silent "$cert_url"
curl --silent  "http://www.startssl.com/certs/ca.pem"