openstack/puppet-tripleo
Code Issues Proposed changes

[Train ONLY] remove if statement from local ca check

Browse Source 
Current change will not work reliably.
Removing this if statement will just cause the script to
extract and update the CA trust on each renewal

Change-Id: Ideca344e4aa63b4d988a772f3b0a338eef01a310
This commit is contained in:
David Sedgmen 2022-11-14 14:47:10 +00:00
parent 2342e636b8
commit d4e49c4543
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
files/certmonger-haproxy-refresh.sh
View File

@ -21,12 +21,9 @@ ca_path=""
if [ "$certmonger_ca" == "local" ]; then
ca_path="/etc/pki/ca-trust/source/anchors/cm-local-ca.pem"
#check if CA is still valid and update if not
if ! openssl verify ${ca_path}; then
openssl pkcs12 -in /var/lib/certmonger/local/creds -out ${ca_path} -nokeys -nodes -passin pass:''
chmod 0644 ${ca_path}
update-ca-trust extract
fi
elif [ "$certmonger_ca" == "IPA" ]; then
ca_path="/etc/ipa/ca.crt"
fi