]> git.ipfire.org Git - thirdparty/dehydrated.git/commitdiff
Better solution for issue #845
authorLukas Schauer <lukas@schauer.dev>
Sun, 31 Oct 2021 19:11:31 +0000 (20:11 +0100)
committerLukas Schauer <lukas@schauer.dev>
Sun, 31 Oct 2021 19:11:31 +0000 (20:11 +0100)
dehydrated

index cfcdae88c064e4c7ada8eee3c2e56633fe7b2921..eb38116b3ec06f66111206a2a2b3244d92549873 100755 (executable)
@@ -1198,16 +1198,13 @@ sign_csr() {
     crt="$(signed_request "${certificate}" "" 4>"${resheaders}")"
 
     if [ -n "${PREFERRED_CHAIN:-}" ]; then
-      if ! (grep -Ei '^link:' "${resheaders}" | grep -q -Ei 'rel="alternate"'); then
-        _exiterr "Preferred chain defined but CA doesn't offer chain selection."
-      fi
       foundaltchain=0
       altcn="$(get_last_cn "${crt}")"
       altoptions="${altcn}"
       if [ "${altcn}" = "${PREFERRED_CHAIN}" ]; then
         foundaltchain=1
       fi
-      if [ "${foundaltchain}" = "0" ]; then
+      if [ "${foundaltchain}" = "0" ] && (grep -Ei '^link:' "${resheaders}" | grep -q -Ei 'rel="alternate"'); then
         while read -r altcrturl; do
           if [ "${foundaltchain}" = "0" ]; then
             altcrt="$(signed_request "${altcrturl}" "")"