Insert in different location

This commit is contained in:
Bob Mottram 2015-12-10 15:37:02 +00:00
parent 2a04c73d82
commit c94f7d0fcd
1 changed files with 7 additions and 1 deletions

View File

@ -50,11 +50,17 @@ KEY_HASH=$(openssl rsa -in $KEY_FILENAME -outform der -pubout | openssl dgst -sh
PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
sed -i "/add_header Access-Control-Allow-Origin.*/a $PIN_HEADER" $SITE_FILENAME
sed -i "/ssl_ciphers.*/a $PIN_HEADER" $SITE_FILENAME
else
sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
fi
systemctl restart nginx
if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
echo $'Pinning failed'
fi
echo "Pinned $DOMAIN_NAME with hash $KEY_HASH"
exit 0