From abdc9b0cbdfcab17ab5d47c0afce7b8c79be931a Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Thu, 20 Dec 2018 17:25:23 +0100 Subject: README: add Root CA certificate DST Root CA X3 This is used by Let's Encrypt to cross-sign. --- initial-commands | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'initial-commands') diff --git a/initial-commands b/initial-commands index 37b7415..01b5308 100644 --- a/initial-commands +++ b/initial-commands @@ -8,7 +8,8 @@ / certificate import file-name=letsencrypt.pem passphrase=""; / certificate set name="ISRG-Root-X1" [ find where fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" ]; / certificate set name="Let-s-Encrypt-Authority-X3" [ find where fingerprint="731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568" ]; - :if ([ / certificate print count-only where fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" or fingerprint="731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568" ] != 2) do={ + / certificate set name="DST-Root-CA-X3" [ find where fingerprint="0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739" ]; + :if ([ / certificate print count-only where fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" or fingerprint="731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568" or fingerprint="0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739" ] != 3) do={ :error "Anything is wrong with your certificates!"; } :foreach script in={ "global-config"; "global-functions"; "script-updates" } do={ -- cgit v1.2.3-54-g00ecf