Fix handling of custom LDAP cert

This change moves the LDAP cert installation into a common script and reorganizes the startup scripts for creating and installing these certs

Fixes #1846
This commit is contained in:
Joseph Schorr 2016-09-19 17:55:08 -04:00
parent 8ab60640fe
commit c7beea2032
5 changed files with 18 additions and 17 deletions

8
conf/init/certs_create.sh Executable file
View file

@ -0,0 +1,8 @@
#! /bin/bash
set -e
# Create certs for jwtproxy to mitm outgoing TLS connections
echo '{"CN":"CA","key":{"algo":"rsa","size":2048}}' | cfssl gencert -initca - | cfssljson -bare mitm
cp mitm-key.pem /conf/mitm.key
cp mitm.pem /conf/mitm.cert
cp mitm.pem /usr/local/share/ca-certificates/mitm.crt