#!/bin/sh
set -ef

: "${RENEWED_LINEAGE:?}"
d="${RENEWED_LINEAGE}"

[ -d "$d" ] || {
	env printf '%s: not a directory: %q\n' "$0" "$d" >&2
	exit 1
}

chain="$d/chain.pem"
cert="$d/cert.pem"
ocsp="$d/ocsp.der"

[ -s "${cert}" ]  || exit 2
[ -s "${chain}" ] || exit 3

exec openssl-ocsp "${chain}" "${cert}" "${ocsp}"