Browse Source

Merge "Don't inherit enforcing bash errexit in devstack plugin"

changes/77/720777/1
Zuul 2 years ago committed by Gerrit Code Review
parent
commit
0f52069be8
  1. 3
      bin/create_dual_intermediate_CA.sh
  2. 3
      bin/create_single_CA_intermediate_CA.sh

3
bin/create_dual_intermediate_CA.sh

@ -146,6 +146,9 @@ echo "################# Verifying the Octavia files ###########################"
openssl verify -CAfile etc/octavia/certs/client_ca.cert.pem etc/octavia/certs/client.cert-and-key.pem
openssl verify -CAfile etc/octavia/certs/server_ca-chain.cert.pem etc/octavia/certs/server_ca.cert.pem
# We are done, stop enforcing shell errexit
set +e
echo "!!!!!!!!!!!!!!!Do not use this script for deployments!!!!!!!!!!!!!"
echo "Please use the Octavia Certificate Configuration guide:"
echo "https://docs.openstack.org/octavia/latest/admin/guides/certificates.html"

3
bin/create_single_CA_intermediate_CA.sh

@ -104,6 +104,9 @@ echo "################# Verifying the Octavia files ###########################"
openssl verify -CAfile etc/octavia/certs/client_ca.cert.pem etc/octavia/certs/client.cert-and-key.pem
openssl verify -CAfile etc/octavia/certs/server_ca.cert.pem etc/octavia/certs/server_ca.cert.pem
# We are done, stop enforcing shell errexit
set +e
echo "!!!!!!!!!!!!!!!Do not use this script for deployments!!!!!!!!!!!!!"
echo "Single CA mode is insecure, do not use this! It is for testing only."
echo "Please use the Octavia Certificate Configuration guide:"

Loading…
Cancel
Save