From 0a3011ca2da0f8f9cc4b6beebda9af7dca919cc8 Mon Sep 17 00:00:00 2001
From: Pinga <help@namingo.org>
Date: Wed, 21 May 2025 12:13:08 +0300
Subject: [PATCH] Scripts now download ICANN TMCH crt files

---
 docs/install.sh    | 5 +++++
 docs/update1021.sh | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/docs/install.sh b/docs/install.sh
index 6784f2f..49f21e0 100644
--- a/docs/install.sh
+++ b/docs/install.sh
@@ -525,6 +525,11 @@ EOF
     echo "Setting up cache."
     chown www-data:www-data /var/www/cp/cache
 
+    echo "Downloading ICANN TMCH certificate data."
+    curl -o /etc/ssl/certs/tmch.pem https://ca.icann.org/tmch.crt
+    curl -o /etc/ssl/certs/tmch_pilot.pem https://ca.icann.org/tmch_pilot.crt
+    chmod 644 /etc/ssl/certs/tmch.pem /etc/ssl/certs/tmch_pilot.pem
+
     echo -e "Installation complete!\n"
     echo -e "Next steps:\n"
     echo -e "1. Configure each component by editing their respective configuration files."
diff --git a/docs/update1021.sh b/docs/update1021.sh
index ca753f0..2eec7cb 100644
--- a/docs/update1021.sh
+++ b/docs/update1021.sh
@@ -164,6 +164,11 @@ systemctl restart ${PHP_VERSION}-fpm
 
 wget "http://www.adminer.org/latest.php" -O /usr/share/adminer/latest.php
 
+echo "Downloading ICANN TMCH certificate data."
+curl -o /etc/ssl/certs/tmch.pem https://ca.icann.org/tmch.crt
+curl -o /etc/ssl/certs/tmch_pilot.pem https://ca.icann.org/tmch_pilot.crt
+chmod 644 /etc/ssl/certs/tmch.pem /etc/ssl/certs/tmch_pilot.pem
+
 # Start services
 echo "Starting services..."
 systemctl start epp