summaryrefslogtreecommitdiffstats
path: root/roles/distgit/files/updatecrl.sh
blob: 81ee19597fbabab04c38b549693c15972033ca77 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
#!/bin/bash

URL=https://admin.fedoraproject.org/ca/crl.pem
OLD=/etc/pki/tls/crl.pem
NEW=/tmp/crl.pem

if [ -f $OLD ]; then
    wget -q $URL -O $NEW
    OLDUPDATE=`openssl crl -in $OLD -noout -lastupdate`
    NEWUPDATE=`openssl crl -in $NEW -noout -lastupdate`

    if [ "$OLDUPDATE" != "$NEWUPDATE" ]; then
        mv $NEW $OLD
        /usr/sbin/restorecon $OLD
        /usr/bin/systemctl reload httpd
    fi
else
    wget -q $URL -O  $OLD
    /usr/sbin/restorecon $OLD
    /usr/bin/systemctl is-active httpd && /usr/bin/systemctl reload httpd
fi