diff --git a/build/bin/import_certs.sh b/build/bin/import_certs.sh index adb28a5..9465e04 100755 --- a/build/bin/import_certs.sh +++ b/build/bin/import_certs.sh @@ -2,18 +2,17 @@ set -e mydir=/tmp/rds-ca -if [ ! -e "${mydir}" ] -then -mkdir -p "${mydir}" +if [ ! -e "${mydir}" ]; then + mkdir -p "${mydir}" fi pushd "${mydir}" -curl -sS "https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem" > ${mydir}/rds-combined-ca-bundle.pem -awk 'split_after == 1 {n++;split_after=0} /-----END CERTIFICATE-----/ {split_after=1}{print > "rds-ca-" n ""}' < ${mydir}/rds-combined-ca-bundle.pem +curl -sS "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" >${mydir}/rds-combined-ca-bundle.pem +awk 'split_after == 1 {n++;split_after=0} /-----END CERTIFICATE-----/ {split_after=1}{print > "rds-ca-" n ""}' <${mydir}/rds-combined-ca-bundle.pem for CERT in rds-ca-*; do - mv "$CERT" "/usr/local/share/ca-certificates/aws-rds-ca-$(basename $CERT).crt" -done + mv "$CERT" "/usr/local/share/ca-certificates/aws-rds-ca-$(basename $CERT).crt" +done popd rm -rf ${mydir}