smallstep-certificates/examples/docker/renewer/entrypoint.sh

#!/bin/sh

# Wait for CA
sleep 5

# Clean old certificates
rm -f /var/local/step/root_ca.crt
rm -f /var/local/step/site.crt /var/local/step/site.key

# Download the root certificate
step ca root /var/local/step/root_ca.crt

# Get token
STEP_TOKEN=$(step ca token $COMMON_NAME)
# Download the root certificate
step ca certificate --token $STEP_TOKEN $COMMON_NAME /var/local/step/site.crt /var/local/step/site.key

exec "$@"