sign-request.in: check SANs via http if csr was not retrieved via https

1 files changed, 1 insertions, 1 deletions

diff --git a/sign-request.in b/sign-request.in
index 3de4e56..52b481e 100755
--- a/sign-request.in
+++ b/sign-request.in
@@ -78,7 +78,7 @@ while read -r csr; do
   ok_sans=$(
     printf '%s\n' "${cn}" "${sans}" \
     | while read -r san; do
-      if ! curl --connect-timeout 10 -Ss --insecure 'https://'"${san}/${csr#*//*/}" \
+      if ! curl --connect-timeout 10 -Ss --insecure "${csr%%://*}"'://'"${san}/${csr#*//*/}" \
         | diff -q - "${csr_local}"; then
         >&2 printf 'invalid san "%s" - skipping\n' "${san}"
         rm "${csr_local}"