quay/conf/init/certs_install.sh

#! /bin/bash
set -e

# Add the custom LDAP certificate
if [ -e /conf/stack/ldap.crt ]
then
  cp /conf/stack/ldap.crt /usr/local/share/ca-certificates/ldap.crt
fi

# Add extra trusted certificates (as a directory)
if [ -d /conf/stack/extra_ca_certs ]; then
  echo "Installing extra certificates found in /conf/stack/extra_ca_certs directory"
  cp /conf/stack/extra_ca_certs/* /usr/local/share/ca-certificates/
  cat /conf/stack/extra_ca_certs/* >> /venv/lib/python2.7/site-packages/requests/cacert.pem
fi

# Add extra trusted certificates (as a file)
if [ -f /conf/stack/extra_ca_certs ]; then
  echo "Installing extra certificates found in /conf/stack/extra_ca_certs file"
  csplit -z -f /usr/local/share/ca-certificates/extra-ca- /conf/stack/extra_ca_certs  '/-----BEGIN CERTIFICATE-----/' '{*}'
  cat /conf/stack/extra_ca_certs >> /venv/lib/python2.7/site-packages/requests/cacert.pem
fi

# Update all CA certificates.
update-ca-certificates
Fix handling of custom LDAP cert This change moves the LDAP cert installation into a common script and reorganizes the startup scripts for creating and installing these certs Fixes #1846 2016-09-19 21:55:08 +00:00			`#! /bin/bash`
			`set -e`

			`# Add the custom LDAP certificate`
			`if [ -e /conf/stack/ldap.crt ]`
			`then`
			`cp /conf/stack/ldap.crt /usr/local/share/ca-certificates/ldap.crt`
			`fi`

Have certs_install install all custom certs for requests as well Also supports `extra_ca_certs` being a single file, which is useful for the Kubernetes configmap case Fixes https://www.pivotaltracker.com/story/show/134302623 2016-11-30 19:04:26 +00:00			`# Add extra trusted certificates (as a directory)`
Fix handling of custom LDAP cert This change moves the LDAP cert installation into a common script and reorganizes the startup scripts for creating and installing these certs Fixes #1846 2016-09-19 21:55:08 +00:00			`if [ -d /conf/stack/extra_ca_certs ]; then`
Have certs_install install all custom certs for requests as well Also supports `extra_ca_certs` being a single file, which is useful for the Kubernetes configmap case Fixes https://www.pivotaltracker.com/story/show/134302623 2016-11-30 19:04:26 +00:00			`echo "Installing extra certificates found in /conf/stack/extra_ca_certs directory"`
			`cp /conf/stack/extra_ca_certs/* /usr/local/share/ca-certificates/`
			`cat /conf/stack/extra_ca_certs/* >> /venv/lib/python2.7/site-packages/requests/cacert.pem`
Fix handling of custom LDAP cert This change moves the LDAP cert installation into a common script and reorganizes the startup scripts for creating and installing these certs Fixes #1846 2016-09-19 21:55:08 +00:00			`fi`

Have certs_install install all custom certs for requests as well Also supports `extra_ca_certs` being a single file, which is useful for the Kubernetes configmap case Fixes https://www.pivotaltracker.com/story/show/134302623 2016-11-30 19:04:26 +00:00			`# Add extra trusted certificates (as a file)`
			`if [ -f /conf/stack/extra_ca_certs ]; then`
			`echo "Installing extra certificates found in /conf/stack/extra_ca_certs file"`
			`csplit -z -f /usr/local/share/ca-certificates/extra-ca- /conf/stack/extra_ca_certs '/-----BEGIN CERTIFICATE-----/' '{*}'`
			`cat /conf/stack/extra_ca_certs >> /venv/lib/python2.7/site-packages/requests/cacert.pem`
			`fi`

			`# Update all CA certificates.`
Fix handling of custom LDAP cert This change moves the LDAP cert installation into a common script and reorganizes the startup scripts for creating and installing these certs Fixes #1846 2016-09-19 21:55:08 +00:00			`update-ca-certificates`