Kaynağa Gözat

Insert in different location

Bob Mottram 9 yıl önce
ebeveyn
işleme
c94f7d0fcd
1 değiştirilmiş dosya ile 7 ekleme ve 1 silme
  1. 7
    1
      src/freedombone-pin-cert

+ 7
- 1
src/freedombone-pin-cert Dosyayı Görüntüle

50
 
50
 
51
 PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
51
 PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
52
 if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
52
 if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
53
-    sed -i "/add_header Access-Control-Allow-Origin.*/a $PIN_HEADER" $SITE_FILENAME
53
+    sed -i "/ssl_ciphers.*/a $PIN_HEADER" $SITE_FILENAME
54
 else
54
 else
55
     sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
55
     sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
56
 fi
56
 fi
57
 
57
 
58
 systemctl restart nginx
58
 systemctl restart nginx
59
 
59
 
60
+if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
61
+    echo $'Pinning failed'
62
+fi
63
+
64
+echo "Pinned $DOMAIN_NAME with hash $KEY_HASH"
65
+
60
 exit 0
66
 exit 0