Fix handling of custom LDAP cert
This change moves the LDAP cert installation into a common script and reorganizes the startup scripts for creating and installing these certs Fixes #1846
This commit is contained in:
parent
8ab60640fe
commit
c7beea2032
5 changed files with 18 additions and 17 deletions
|
@ -6,10 +6,3 @@ echo '{"CN":"CA","key":{"algo":"rsa","size":2048}}' | cfssl gencert -initca - |
|
|||
cp mitm-key.pem /conf/mitm.key
|
||||
cp mitm.pem /conf/mitm.cert
|
||||
cp mitm.pem /usr/local/share/ca-certificates/mitm.crt
|
||||
|
||||
# Add extra trusted certificates
|
||||
if [ -d /conf/stack/extra_ca_certs ]; then
|
||||
cp /conf/stack/extra_ca_certs/* /usr/local/share/ca-certificates/
|
||||
fi
|
||||
|
||||
update-ca-certificates
|
15
conf/init/certs_install.sh
Executable file
15
conf/init/certs_install.sh
Executable file
|
@ -0,0 +1,15 @@
|
|||
#! /bin/bash
|
||||
set -e
|
||||
|
||||
# Add the custom LDAP certificate
|
||||
if [ -e /conf/stack/ldap.crt ]
|
||||
then
|
||||
cp /conf/stack/ldap.crt /usr/local/share/ca-certificates/ldap.crt
|
||||
fi
|
||||
|
||||
# Add extra trusted certificates
|
||||
if [ -d /conf/stack/extra_ca_certs ]; then
|
||||
cp /conf/stack/extra_ca_certs/* /usr/local/share/ca-certificates/
|
||||
fi
|
||||
|
||||
update-ca-certificates
|
|
@ -1,8 +0,0 @@
|
|||
#! /bin/bash
|
||||
set -e
|
||||
|
||||
if [ -e /conf/stack/ldap.crt ]
|
||||
then
|
||||
cp /conf/stack/ldap.crt /usr/local/share/ca-certificates/ldap.crt
|
||||
/usr/sbin/update-ca-certificates
|
||||
fi
|
Reference in a new issue