JankariTechUG/GitTrustedTimestamps
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

Only download CRL once #16

Merged
artur merged 2 commits from onlyDownloadOnce into main 2026-10-05 10:14:54 +00:00
Conversation 2 Commits 2 Files Changed 8
+8 -2
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 57f0bbaf9c - Show all commits
hooks/timestamping
+8 -2
View File
@@ -535,7 +535,7 @@ download_crls_for_chain() {
assert "[ -f $CERT_FILE ]" "Precondition: Certificate file $CERT_FILE must exist." assert "[ -f $CERT_FILE ]" "Precondition: Certificate file $CERT_FILE must exist."
echo -n > "$OUTPUT_FILE" echo -n > "$OUTPUT_FILE"
local CRL_TMP="$TMP_DIR"/crl_tmp.crl
#remove files from possible previous runs #remove files from possible previous runs
rm -f "$TMP_DIR"/*.extracted.pem.cer rm -f "$TMP_DIR"/*.extracted.pem.cer
#extract all contained certificates into separate files #extract all contained certificates into separate files
@@ -553,7 +553,13 @@ download_crls_for_chain() {
local URL=$(openssl x509 -inform PEM -in $EXTRACTED_CERT -text -noout \ local URL=$(openssl x509 -inform PEM -in $EXTRACTED_CERT -text -noout \
| awk '/CRL Distribution Points:/{f=1} f && /URI:/ {print; exit}' \ | awk '/CRL Distribution Points:/{f=1} f && /URI:/ {print; exit}' \
| sed 's/^.*URI://1') | sed 's/^.*URI://1')
if curl -L "$URL" --output "$CRL_TMP" &> "$OUT_STREAM"; then local CRL_TMP="$TMP_DIR"/crl_tmp.$(echo "$URL" | sha256sum -z | awk '{printf "%s",$1}').crl
local CURL_EXIT_CODE=0
if [ ! -f $CRL_TMP ]; then
curl -L "$URL" --output "$CRL_TMP" &> "$OUT_STREAM"
CURL_EXIT_CODE=$?
fi
if [ $CURL_EXIT_CODE -eq 0 ]; then
if openssl crl -in "$CRL_TMP" -inform DER -noout &> "$OUT_STREAM"; then if openssl crl -in "$CRL_TMP" -inform DER -noout &> "$OUT_STREAM"; then
openssl crl -in "$CRL_TMP" -inform DER >> "$OUTPUT_FILE" openssl crl -in "$CRL_TMP" -inform DER >> "$OUTPUT_FILE"
elif openssl crl -in "$CRL_TMP" -inform PEM -noout &> "$OUT_STREAM"; then elif openssl crl -in "$CRL_TMP" -inform PEM -noout &> "$OUT_STREAM"; then