FEAT: refresh_upmc_certs.bash

Author: WillForan

refresh_upmc_certs.bash

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+#
+# 20250313WF - init, copied from wiki (c. 20230707)
+# https://lncd.pitt.edu/wiki/doku.php?id=tools:certificates
+
+# run as root
+if [ ! "$UID" -eq 0 ] ; then sudo "$0" "$@"; exit $?; fi
+
+# github.com/LabNeuroCogDevel/lncdtools
+PATH="$PATH:/opt/ni_tools/lncdtools" # cp-date (and internally used 'dryrun')
+cd /usr/local/share/ca-certificates/ || exit 1
+
+cert_loc=http://upmccrl.upmc.com/CDP/
+for crt in UPMC-CA23 UPMC-CA20 UPMC-ROOT-CA; do
+   test -r "$crt.crt-der" && cp-date --mv "$crt.crt-der"
+   wget "$cert_loc/$crt.crt" -O "$crt.crt-der" || continue
+   openssl x509 -in $crt.crt-der -out $crt.crt -outform PEM
+done
+update-ca-certificates
+curl -svvI https://www.google.com
+openssl s_client -showcerts -servername google.com -connect www.google.com:443 <<< ""