+
−#!/bin/sh
+
−# Combines a private key and host cert into a single pemfile, for webservers
+
−# that require it.
+
−
+
−if [ $# -lt 1 ]
+
−then
+
−	echo "No domains given."
+
−	exit 1
+
−fi
+
−
+
−if [ "$1" = "-r" ]
+
−then
+
−	RESTART=1
+
−	shift
+
−else
+
−	RESTART=0
+
−fi
+
−
+
−for DOMAIN in "$@"
+
−do
+
−	LINKDIR=/etc/letsencrypt/live/"$DOMAIN"
+
−	if [ ! -d "$LINKDIR" ]
+
−	then
+
−		echo "No certificates for $DOMAIN, skipping"
+
−		continue
+
−	fi
+
−	REALCERTFILE=`readlink -f "$LINKDIR"/cert.pem`
+
−	PEMFILE=`dirname "$REALCERTFILE"`/combined.pem
+
−	touch "$PEMFILE"
+
−	chown root:root "$PEMFILE"
+
−	chmod 400 "$PEMFILE"
+
−	cat "$LINKDIR"/privkey.pem "$LINKDIR"/cert.pem >"$PEMFILE"
+
−	ln -s -f -r "$PEMFILE" "$LINKDIR"/combined.pem
+
−done
+
−
+
−if [ "$RESTART" = 1 ]
+
−then
+
−	systemctl restart lighttpd
+
−fi