From 56bc9d45bbaee17507ec2b05cd84d7b59d3c9a3f Mon Sep 17 00:00:00 2001
From: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun, 20 Oct 2019 14:44:39 +0200
Subject: [PATCH] [SSL] prevent multiple certificates with the same domain
---
data/Dockerfiles/acme/acme.sh | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/data/Dockerfiles/acme/acme.sh b/data/Dockerfiles/acme/acme.sh
index 9f1904f5..f9c39ed8 100755
--- a/data/Dockerfiles/acme/acme.sh
+++ b/data/Dockerfiles/acme/acme.sh
@@ -283,6 +283,15 @@ while true; do
declare -a VALIDATED_DOMAINS_SORTED
VALIDATED_DOMAINS_SORTED=(${VALIDATED_DOMAINS_ARR[0]} $(echo ${VALIDATED_DOMAINS_ARR[@]:1} | xargs -n1 | sort -u | xargs))
+ # remove all domain names that are already inside the server certificate (SERVER_SAN_VALIDATED)
+ for domain in "${SERVER_SAN_VALIDATED[@]}"; do
+ for i in "${!VALIDATED_DOMAINS_SORTED[@]}"; do
+ if [[ ${VALIDATED_DOMAINS_SORTED[i]} = $domain ]]; then
+ unset 'VALIDATED_DOMAINS_SORTED[i]'
+ fi
+ done
+ done
+
if [[ ! -z ${VALIDATED_DOMAINS_SORTED[*]} ]]; then
CERT_NAME=${VALIDATED_DOMAINS_SORTED[0]}
VALIDATED_CERTIFICATES+=("${CERT_NAME}")