https://github.com/zakjan/cert-chain-resolver/issues - add an issue?

Note that "set -e" doesn't work in subshells so you have to be extremely careful if you make complex subshell commands or write set -e in every subshell too.

Apparently, "pipefail" is a bashism, you can't use it on portable scripts.

Author here.

I used the options you mention before, however I found it highly unreliable. I have replaced them with better manual error handling and tests. Please review the latest code. I'm looking forward to any reported issues.