#!/bin/sh echo "Starting getting CAs"; # get the current CAs sscep getca -u http://pki.secmayl.com/scep -c ca.crt; # rename them and remove the non-CAs mv ca.crt-2 root.pem mv ca.crt-1 ca.pem rm ca.crt-0 # make a chain file cat ca.pem root.pem > chain.pem echo "Finished getting CAs";