Update load-ca.sh

load-ca.sh

@@ -1,10 +1,19 @@
 #!/bin/sh
 
-# 将环境变量转换为证书文件
-echo "$CA_CERT_CONTENT" | sed 's/\\n/\n/g' > /usr/local/share/ca-certificates/custom-ca/db-ca.crt
+# 强制创建目标目录
+mkdir -p /usr/local/share/ca-certificates/custom-ca || exit 1
 
-# 自动更新证书链（Alpine专用命令）
-update-ca-certificates --fresh >/dev/null 2>&1 || true
+# 可靠的环境变量转换方法
+echo "${CA_CERT_CONTENT}" | awk '{gsub(/\\n/, "\n")} 1' > /usr/local/share/ca-certificates/custom-ca/db-ca.crt
 
-# 启动原始应用
+# 证书有效性验证
+if ! /usr/bin/openssl x509 -in /usr/local/share/ca-certificates/custom-ca/db-ca.crt -noout >/dev/null 2>&1; then
+  echo "证书格式错误！请确认环境变量中的换行符已转义为\\n"
+  exit 1
+fi
+
+# 更新证书链
+/usr/sbin/update-ca-certificates --fresh >/dev/null
+
+# 传递启动命令
 exec "$@"