commit getca.sh

automation/certificates/internal/getca.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+
+echo "Starting getting CAs";
+
+# get the current CAs
+sscep getca -u http://pki.secmayl.com/scep -c ca.crt;
+
+# rename them and remove the non-CAs
+mv ca.crt-2 root.pem
+mv ca.crt-1 ca.pem
+rm ca.crt-0
+
+# make a chain file
+cat ca.pem root.pem > chain.pem
+
+echo "Finished getting CAs";