On Tue, Jul 23, 2013 at 03:35:18AM -0700, Matthias Lohr wrote:
> > @@ -5,6 +5,14 @@ set -e
> >  HERE=$(dirname $0)
> >  cd $HERE
> >  
> > -../tools/verify-all-ssl-certs.sh > cert-status.txt
> > -./convert-cert-status.py cert-status.txt > cert-status.html.tmp
> > -mv cert-status.html.tmp cert-status.html
> > +STATIC="css img js"
> > +TARGETDIR=/var/www/certstatus
> > +TARGET=$TARGETDIR/index.html
> > +
> > +# deploy static stuff
> > +cp -ar $STATIC $TARGETDIR
> > +
> > +# deploy info
> > +../tools/verify-all-ssl-certs.sh cert-status.txt
> > +./convert-cert-status.py cert-status.txt > ${TARGET}.tmp
> > +mv ${TARGET}.tmp $TARGET
> 
> Why do you need the .tmp-file? You could write the output directly to $TARGET.

Hi, sorry for the slow reply. The rational for this is that if for
some reason ./convert-cert-status.py fails (crashes etc) then $TARGET
is not in a half-written state (or zero) but instead its still the old
(and valid) version. Note that the script runs with set -e so if
convert-cert-status.py exists with != 0 the "mv" line is not executed.

Cheers,
 Michael