Debian DST Root CA X3 expiration fix

debian-letsencrypt-x3-fix.sh

#!/bin/bash

if [[ `id -u` -ne 0 ]]; then
    echo "Error: you must be root to execute this script!"
    exit 1
fi

TMPDIR="$(mktemp -d -p /tmp -t "tmp.XXXXXXXXXX")"
cd $TMPDIR

wget https://letsencrypt.org/certs/isrgrootx1.pem --no-check-certificate
wget https://letsencrypt.org/certs/isrg-root-x2.pem --no-check-certificate
wget https://letsencrypt.org/certs/lets-encrypt-r3.pem --no-check-certificate

mkdir /usr/share/ca-certificates/extra

cp isrgrootx1.pem isrg-root-x2.pem lets-encrypt-r3.pem /usr/share/ca-certificates/extra

echo "extra/isrgrootx1.pem" >> /etc/ca-certificates.conf
echo "extra/isrg-root-x2.pem" >> /etc/ca-certificates.conf
echo "extra/lets-encrypt-r3.pem" >> /etc/ca-certificates.conf

update-ca-certificates

cd $OLDPW

rm -rfv $TMPDIR