kienan
/
AlternC
mirror of https://github.com/kienanstewart/AlternC.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Provide a snakeoil certificate 

* By default AlternC will use a snakeoil certificate
* Is set as default as 0 id to failback when no certificate provider can
set a certificate
This commit is contained in:
cam.lafit 2018-06-23 11:00:45 +02:00
parent 2ed4cbad21
commit ecfa105982
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
install/alternc.install
View File

@ -289,6 +289,22 @@ else
ln -fs /etc/alternc/alternc.ini /etc/php$php/cli/conf.d/alternc.ini || true ln -fs /etc/alternc/alternc.ini /etc/php$php/cli/conf.d/alternc.ini || true
fi fi
#Set a default certificate if needed
make-ssl-cert generate-default-snakeoil
SNAKEOIL_SSLKEY=$(</etc/ssl/private/ssl-cert-snakeoil.key)
SNAKEOIL_SSLCRT=$(</etc/ssl/certs/ssl-cert-snakeoil.pem)
mysql_query "SET SESSION sql_mode=\"NO_AUTO_VALUE_ON_ZERO\" ; INSERT IGNORE INTO \
certificates (id,uid,status,fqdn,validstart,validend,sslkey,sslcrt,provider) \
VALUES \
(0,2000,1,\"ALTERNC_DEFAULT_FQDN\",NOW(),ADDDATE(NOW(),INTERVAL 200 YEAR),\"$SNAKEOIL_SSLKEY\",\"$SNAKEOIL_SSLCRT\",\"snakeoil\");"
if [ ! -e /etc/alternc/apache.pem ]; then
echo -e "$SNAKEOIL_SSLKEY\n$SNAKEOIL_SSLCRT" > /etc/alternc/apache.pem
fi
run-parts --arg=certificates /usr/lib/alternc/install.d
if [ -x /usr/sbin/apache2 ]; then if [ -x /usr/sbin/apache2 ]; then
# hook # hook
run-parts --arg=apache2 /usr/lib/alternc/install.d run-parts --arg=apache2 /usr/lib/alternc/install.d