From 56bc9d45bbaee17507ec2b05cd84d7b59d3c9a3f Mon Sep 17 00:00:00 2001 From: Marcel Hofer Date: Sun, 20 Oct 2019 14:44:39 +0200 Subject: [PATCH] [SSL] prevent multiple certificates with the same domain --- data/Dockerfiles/acme/acme.sh | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/data/Dockerfiles/acme/acme.sh b/data/Dockerfiles/acme/acme.sh index 9f1904f5..f9c39ed8 100755 --- a/data/Dockerfiles/acme/acme.sh +++ b/data/Dockerfiles/acme/acme.sh @@ -283,6 +283,15 @@ while true; do declare -a VALIDATED_DOMAINS_SORTED VALIDATED_DOMAINS_SORTED=(${VALIDATED_DOMAINS_ARR[0]} $(echo ${VALIDATED_DOMAINS_ARR[@]:1} | xargs -n1 | sort -u | xargs)) + # remove all domain names that are already inside the server certificate (SERVER_SAN_VALIDATED) + for domain in "${SERVER_SAN_VALIDATED[@]}"; do + for i in "${!VALIDATED_DOMAINS_SORTED[@]}"; do + if [[ ${VALIDATED_DOMAINS_SORTED[i]} = $domain ]]; then + unset 'VALIDATED_DOMAINS_SORTED[i]' + fi + done + done + if [[ ! -z ${VALIDATED_DOMAINS_SORTED[*]} ]]; then CERT_NAME=${VALIDATED_DOMAINS_SORTED[0]} VALIDATED_CERTIFICATES+=("${CERT_NAME}")