Skip to content

Commit 8ed4dca

Browse files
author
Tom Maher
committed
properly add the fixture CA to CI system store
1 parent 0a8c099 commit 8ed4dca

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

script/install-openldap

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,9 +48,8 @@ chown -R openldap.openldap /var/lib/ldap
4848
rm -rf $TMPDIR
4949

5050
# SSL
51-
export CA_CERT="/etc/ssl/certs/cacert.pem"
52-
export CA_KEY="/etc/ssl/private/cakey.pem"
53-
export CA_INFO="/etc/ssl/ca.info"
51+
export CA_CERT="/usr/local/share/ca-certificates/rubyldap-ca.crt"
52+
export CA_KEY="/etc/ssl/private/rubyldap-ca.key"
5453

5554
# The self-signed fixture CA cert & key are generated by
5655
# `script/generate-fiuxture-ca` and checked into version control.
@@ -59,7 +58,9 @@ export CA_INFO="/etc/ssl/ca.info"
5958

6059
cp "${SEED_PATH}/ca/cacert.pem" "${CA_CERT}"
6160
cp "${SEED_PATH}/ca/cakey.pem" "${CA_KEY}"
62-
cp "${SEED_PATH}/ca/ca.info" "${CA_INFO}"
61+
62+
# actually add the fake CA to the system store
63+
update-ca-certificates
6364

6465
# Make a private key for the server:
6566
certtool --generate-privkey \

0 commit comments

Comments
 (0)