Update load-ca.sh

load-ca.sh

@@ -1,25 +1,17 @@
-# 改进的load-ca.sh脚本
 #!/bin/sh
 
-# 创建目标目录（防止父目录不存在）
-mkdir -p /certs/custom || exit 1
+# 将环境变量转换为证书文件
+echo "$CA_CERT_CONTENT" | sed 's/\\n/\n/g' > /certs/custom/db-ca.crt
 
-# 转换环境变量为证书文件
-echo "${CA_CERT_CONTENT}" | awk '{gsub(/\\n/,"\n")}1' > /certs/custom/db-ca.crt
-
-# 验证证书有效性
-if ! /usr/bin/openssl x509 -in /certs/custom/db-ca.crt -noout 2>/dev/null; then
-  echo "ERROR: Invalid certificate format. Actual certificate content:"
-  cat /certs/custom/db-ca.crt
+# 验证证书格式
+if ! openssl x509 -in /certs/custom/db-ca.crt -noout; then
+  echo "证书格式错误，请检查环境变量换行符是否正确使用\\n"
   exit 1
 fi
 
-# 添加到系统证书链
+# 添加到系统信任链
 cp /certs/custom/db-ca.crt /usr/local/share/ca-certificates/
 update-ca-certificates --fresh
 
-# 权限修正（适配非root用户）
-chmod 644 /etc/ssl/certs/*.pem 2>/dev/null || true
-
-# 执行原始入口命令
-exec "$@"
+# 启动应用
+exec "$@"