dennydai
/
docker-letsencrypt
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ISRG Root X1 is not yet trusted in most browsers, so use replace it with X3

This commit is contained in:
m31271n 2016-03-29 14:56:34 +08:00
parent 6812f4a96c
commit edae99bbdd
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
cert.sh
View File

@ -1,15 +1,14 @@
#!/bin/bash
path=$(pwd)
path=$( cd "$(dirname "$BASH_SOURCE[0]")" ;pwd -P )
echo -n "Your Domain:"
read domain
docker-compose up -d
openssl genrsa 4096 > $path/certs/$domain.key
openssl req -new -sha256 -key $path/certs/$domain.key -subj "/CN=$domain" > $path/certs/$domain.csr
python $path/acme_tiny.py --account-key account.key --csr $path/certs/$domain.csr --acme-dir $path/www/ > $path/certs/pre.$domain.crt
wget -O - https://letsencrypt.org/certs/lets-encrypt-x1-cross-signed.pem > $path/certs/letsencrypt-intermediate.pem
wget -O - https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem > $path/certs/letsencrypt-intermediate.pem
cat $path/certs/pre.$domain.crt $path/certs/letsencrypt-intermediate.pem > $path/certs/$domain.crt
rm $path/certs/letsencrypt-intermediate.pem
rm $path/certs/pre.$domain.crt
rm $path/certs/$domain.csr
docker-compose stop
docker-compose rm -f
docker-compose down