openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Merge "Always update the local certmonger ca cert"

This commit is contained in:
Zuul 2021-04-08 11:27:15 +00:00 committed by Gerrit Code Review
parent c76182cb3a a65df66fb6
commit 12ef7e9632
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
deployment/haproxy/haproxy-public-tls-certmonger.yaml
View File

@ -95,11 +95,9 @@ outputs:
shell: | shell: |
set -e set -e
ca_pem='/etc/pki/ca-trust/source/anchors/cm-local-ca.pem' ca_pem='/etc/pki/ca-trust/source/anchors/cm-local-ca.pem'
if ! { test -e ${ca_pem} && openssl x509 -checkend 0 -noout -in ${ca_pem}; }; then openssl pkcs12 -in /var/lib/certmonger/local/creds -out ${ca_pem} -nokeys -nodes -passin pass:''
openssl pkcs12 -in /var/lib/certmonger/local/creds -out ${ca_pem} -nokeys -nodes -passin pass:'' chmod 0644 ${ca_pem}
chmod 0644 ${ca_pem} update-ca-trust extract
update-ca-trust extract
fi
test -e ${ca_pem} && openssl x509 -checkend 0 -noout -in ${ca_pem} test -e ${ca_pem} && openssl x509 -checkend 0 -noout -in ${ca_pem}
retries: 5 retries: 5
delay: 1 delay: 1