- verify=$(openssl verify -CAfile $ca $crt)
- # Delete if invalid or if the subject has changed
- if grep -q "error" <<<$verify || \
- [ "$(ssl_cname $crt)" != "$cname" ] || \
- [ "$(ssl_email $crt)" != "$email" ] ; then
- rm -f $crt $ca
+ # Backup if invalid or if the subject has changed
+ if openssl verify -CAfile $ca $crt | grep -q "error" || \
+ [ "$(ssl_cname $crt)" != "$cname" ] ; then
+ backup_file $crt
+ backup_file $ca
+ backup_file $key