Changing the way temporary certs are generated to match new nginx configuration

Author: bfren

overlay/etc/ssl/inc/setup-ssl.sh

@@ -13,7 +13,7 @@ generate_temp_cert () {
         -sha256 \
         -days 3650 \
         -nodes \
-        -out ${1}.crt \
+        -out ${1}/fullchain.crt \
         -keyout ${1}.key \
         -subj "/C=NA/ST=NA/L=NA/O=NA/OU=NA/CN=${2}"
 
@@ -56,6 +56,5 @@ setup_ssl () {
 
     # create self-signed certificate so nginx will start before we request proper certificates
     generate_temp_cert ${CERT} ${DOMAIN_NAME}
-    generate_temp_cert ${FULLCHAIN} ${DOMAIN_NAME}
 
 }

overlay/etc/ssl/request

@@ -16,6 +16,6 @@ source ${INC}/check.sh
 _echo "Requesting SSL certificates..."
 for D in "${!DOMAINS[@]}" ; do
     _echo " - ${D}"
-    /etc/ssl/getssl -U -w ${SSL_CERTS} ${D}
+    /etc/ssl/getssl -U -w ${SSL_CERTS} ${D} || _error "Unable to request certificate for ${D}."
 done
 _done