From: Lukas Schauer <lukas@schauer.dev>
Date: Sun, 31 Oct 2021 19:06:09 +0000 (+0100)
Subject: Show error if chain is configured for a CA which doesn't offer alternate chains ... 
X-Git-Tag: v0.7.1~19
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7ac25358efa183254d856054a69d88262cb2a033;p=thirdparty%2Fdehydrated.git

Show error if chain is configured for a CA which doesn't offer alternate chains (fixes #845)
---

diff --git a/dehydrated b/dehydrated
index c5b7e43..cfcdae8 100755
--- a/dehydrated
+++ b/dehydrated
@@ -1198,6 +1198,9 @@ sign_csr() {
     crt="$(signed_request "${certificate}" "" 4>"${resheaders}")"
 
     if [ -n "${PREFERRED_CHAIN:-}" ]; then
+      if ! (grep -Ei '^link:' "${resheaders}" | grep -q -Ei 'rel="alternate"'); then
+        _exiterr "Preferred chain defined but CA doesn't offer chain selection."
+      fi
       foundaltchain=0
       altcn="$(get_last_cn "${crt}")"
       altoptions="${altcn}"