Skip to content
Snippets Groups Projects
Commit c94f7d0f authored by Bob Mottram's avatar Bob Mottram
Browse files

Insert in different location

parent 2a04c73d
No related branches found
No related tags found
No related merge requests found
......@@ -50,11 +50,17 @@ KEY_HASH=$(openssl rsa -in $KEY_FILENAME -outform der -pubout | openssl dgst -sh
PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
sed -i "/add_header Access-Control-Allow-Origin.*/a $PIN_HEADER" $SITE_FILENAME
sed -i "/ssl_ciphers.*/a $PIN_HEADER" $SITE_FILENAME
else
sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
fi
systemctl restart nginx
if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
echo $'Pinning failed'
fi
echo "Pinned $DOMAIN_NAME with hash $KEY_HASH"
exit 0
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment