From: Lukas Schauer <lukas@schauer.so>
Date: Tue, 8 Dec 2015 17:37:27 +0000 (+0100)
Subject: added staging-ca certificate and added verification test to travis config
X-Git-Tag: v0.1.0~145
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=97d8f71e88dbed8c91ddf1e86bedd1cb9d1efe76;p=thirdparty%2Fdehydrated.git

added staging-ca certificate and added verification test to travis config
---

diff --git a/.gitignore b/.gitignore
index 7c26c55..a3168e4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,4 +3,5 @@ domains.txt
 config.sh
 certs/*
 !certs/lets-encrypt-x1-cross-signed.pem
+!certs/lets-encrypt-staging.pem
 .acme-challenges/*
diff --git a/.travis.yml b/.travis.yml
index e9f5714..aee35df 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -15,9 +15,11 @@ before_script:
   - if [[ -z "${TMP_URL}" ]]; then exit 1; fi
   - echo 'CA="https://acme-staging.api.letsencrypt.org/directory"' > config.sh
   - echo 'WELLKNOWN=".acme-challenges/.well-known/acme-challenge"' >> config.sh
+  - echo 'ROOTCERT="lets-encrypt-staging.pem"' >> config.sh
   - echo "${TMP_URL}" > domains.txt
 
 script:
   - ./letsencrypt.sh
   - openssl x509 -in "certs/${TMP_URL}/cert.pem" -noout -text
+  - openssl verify -verbose -CAfile "certs/${ROOTCERT}" -purpose sslserver "certs/${TMP_URL}/cert.pem"
   - ./letsencrypt.sh revoke "certs/${TMP_URL}/cert.pem"
diff --git a/certs/lets-encrypt-staging.pem b/certs/lets-encrypt-staging.pem
new file mode 100644
index 0000000..760417f
--- /dev/null
+++ b/certs/lets-encrypt-staging.pem
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----