From: Lukas Schauer <lukas@schauer.dev>
Date: Sun, 31 Oct 2021 19:11:31 +0000 (+0100)
Subject: Better solution for issue #845
X-Git-Tag: v0.7.1~18
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=880c99aa63c03e46a4949bcb26d20364b850d0bc;p=thirdparty%2Fdehydrated.git

Better solution for issue #845
---

diff --git a/dehydrated b/dehydrated
index cfcdae8..eb38116 100755
--- a/dehydrated
+++ b/dehydrated
@@ -1198,16 +1198,13 @@ sign_csr() {
     crt="$(signed_request "${certificate}" "" 4>"${resheaders}")"
 
     if [ -n "${PREFERRED_CHAIN:-}" ]; then
-      if ! (grep -Ei '^link:' "${resheaders}" | grep -q -Ei 'rel="alternate"'); then
-        _exiterr "Preferred chain defined but CA doesn't offer chain selection."
-      fi
       foundaltchain=0
       altcn="$(get_last_cn "${crt}")"
       altoptions="${altcn}"
       if [ "${altcn}" = "${PREFERRED_CHAIN}" ]; then
         foundaltchain=1
       fi
-      if [ "${foundaltchain}" = "0" ]; then
+      if [ "${foundaltchain}" = "0" ] && (grep -Ei '^link:' "${resheaders}" | grep -q -Ei 'rel="alternate"'); then
         while read -r altcrturl; do
           if [ "${foundaltchain}" = "0" ]; then
             altcrt="$(signed_request "${altcrturl}" "")"