From 1f003e68b435288eed05fe0fb8c649b866fa0c4b Mon Sep 17 00:00:00 2001 From: Joe Rayhawk Date: Wed, 3 Apr 2013 13:25:03 -0700 Subject: revoke.sh: Adding optional post-revocation script call. --- revoke.sh | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) (limited to 'revoke.sh') diff --git a/revoke.sh b/revoke.sh index 8e45ab7..efd5a3c 100755 --- a/revoke.sh +++ b/revoke.sh @@ -31,7 +31,10 @@ openssl ca -config "$OPENSSL_CONFIG" -gencrl -out "$CA"/ca/"$CA".crl echo openssl crl -in "$CA"/ca/"$CA".crl -text -noout echo -echo Apache: SSLCARevocationFile "$PWD"/"$CA"/ca/"$CA".crl -echo nginx: ssl_crl "$PWD"/"$CA"/ca/"$CA".crl -echo Lighttpd: sucks to be you! - +if [ -x ./post-revoke ]; then + ./post-revoke "$CA"/signed/"$NAME".der +else + echo Apache: SSLCARevocationFile "$PWD"/"$CA"/ca/"$CA".crl + echo nginx: ssl_crl "$PWD"/"$CA"/ca/"$CA".crl + echo Lighttpd: sucks to be you! +fi -- cgit v1.2.3