From 521797cbe696c99d360a7de93e3f096a6a962a21 Mon Sep 17 00:00:00 2001
From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
Date: Thu, 5 Sep 2019 13:47:51 +0300
Subject: dmvpn-crl-update: mirror using wget

---
 dmvpn-crl-update | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

(limited to 'dmvpn-crl-update')

diff --git a/dmvpn-crl-update b/dmvpn-crl-update
index 270b904..4f9965f 100755
--- a/dmvpn-crl-update
+++ b/dmvpn-crl-update
@@ -1,11 +1,25 @@
 #!/bin/sh
 
 # Cron job for CRL retrieval for distribution
-# Copyright (c) 2018 Kaarle Ritvanen
+# Copyright (c) 2018-2019 Kaarle Ritvanen
 # See LICENSE file for license details
 
 CONF_FILE=/etc/dmvpn-crl-dp.conf
 [ -e $CONF_FILE ] && . $CONF_FILE
 
+NEW_CRL=$(mktemp /tmp/dmvpn-crl.XXXXXX)
+
+if [ "$MASTER_CRL_URL" ]; then
+	wget -q -O $NEW_CRL "$MASTER_CRL_URL"
+else
+	${REMOTE_HOST:+ssh $REMOTE_HOST} dmvpn-ca crl export > $NEW_CRL
+fi
+
+if [ $? -gt 0 ]; then
+	rm $NEW_CRL
+	exit 1
+fi
+
+chmod 644 $NEW_CRL
 cd /var/www/localhost/htdocs
-${REMOTE_HOST:+ssh $REMOTE_HOST} dmvpn-ca crl export > "${CRL_PATH:-dmvpn-ca.crl}"
+mv $NEW_CRL "${CRL_PATH:-dmvpn-ca.crl}"
-- 
cgit v1.2.3