Skip to content

Commit f6c7f42

Browse files
authored
Fix the way Hestia validates chain certificate (hestiacp#4887)
1 parent 8e950eb commit f6c7f42

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

func/domain.sh

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -432,10 +432,8 @@ is_web_domain_cert_valid() {
432432
fi
433433

434434
if [ -e "$ssl_dir/$domain.ca" ]; then
435-
s1=$(openssl x509 -text -in $ssl_dir/$domain.crt 2> /dev/null)
436-
s1=$(echo "$s1" | grep Issuer | awk -F = '{print $6}' | head -n1)
437-
s2=$(openssl x509 -text -in $ssl_dir/$domain.ca 2> /dev/null)
438-
s2=$(echo "$s2" | grep Subject | awk -F = '{print $6}' | head -n1)
435+
s1=$(openssl x509 -noout -in $ssl_dir/$domain.crt -issuer 2> /dev/null | cut -d = -f2-)
436+
s2=$(openssl x509 -noout -in $ssl_dir/$domain.ca -subject 2> /dev/null | cut -d = -f2-)
439437
if [ "$s1" != "$s2" ]; then
440438
check_result "$E_NOTEXIST" "SSL intermediate chain is not valid"
441439
fi

0 commit comments

Comments
 (0)