Script instalação cadeia certificados SERPRO

cadeias_certificados_serpro.sh

#!/bin/bash
## Author: Abner Oliveira
## REF: 
### * https://intra.serpro.gov.br/noticias/noticias-2020/cadeias-de-certificacao-precisam-ser-atualizadas/
### * https://gist.github.com/leommoore/4a91060520333c25d93b

### Download

wget http://repositorio.serpro.gov.br/cadeias/serprossl.p7b && \
wget http://repositorio.serpro.gov.br/cadeias/acserprointssl.p7b && \
openssl pkcs7 -in serprossl.p7b -inform DER -out serprossl.crt -print_certs && \
openssl pkcs7 -in acserprointssl.p7b -inform DER -out acserprointssl.crt -print_certs && \
sudo mkdir -p /usr/local/share/ca-certificates/serpro && \
sudo cp *.crt /usr/local/share/ca-certificates/serpro && \
sudo dpkg-reconfigure ca-certificates # ao final atualiza cadeias no Ubuntu/Debian