|
|
|
|
50
|
|
50
|
|
51
|
PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
|
51
|
PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
|
52
|
if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
|
52
|
if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
|
53
|
- sed -i "/add_header Access-Control-Allow-Origin.*/a $PIN_HEADER" $SITE_FILENAME
|
|
|
|
|
53
|
+ sed -i "/ssl_ciphers.*/a $PIN_HEADER" $SITE_FILENAME
|
54
|
else
|
54
|
else
|
55
|
sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
|
55
|
sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
|
56
|
fi
|
56
|
fi
|
57
|
|
57
|
|
58
|
systemctl restart nginx
|
58
|
systemctl restart nginx
|
59
|
|
59
|
|
|
|
60
|
+if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
|
|
|
61
|
+ echo $'Pinning failed'
|
|
|
62
|
+fi
|
|
|
63
|
+
|
|
|
64
|
+echo "Pinned $DOMAIN_NAME with hash $KEY_HASH"
|
|
|
65
|
+
|
60
|
exit 0
|
66
|
exit 0
|