certidude/certidude/templates/snippets/store-authority.sh

# Save CA certificate
mkdir -p /etc/certidude/authority/{{ session.authority.hostname }}/
test -e /etc/certidude/authority/{{ session.authority.hostname }}/ca_cert.pem \
 || cat << EOF > /etc/certidude/authority/{{ session.authority.hostname }}/ca_cert.pem
{{ session.authority.certificate.blob }}EOF
Several updates #4 * Improved offline install docs * Migrated token mechanism backend to SQL * Preliminary token mechanism frontend integration * Add clock skew tolerance for OCSP * Add 'ldap computer filter' support for Kerberized machine enroll * Include OCSP and CRL URL-s in certificates, controlled by profile.conf * Better certificate extension handling * Place DH parameters file in /etc/ssl/dhparam.pem * Always talk to CA over port 8443 for 'certidude enroll' * Hardened frontend nginx config * Separate log files for frontend nginx * Better provisioning heuristics * Add sample site.sh config for LEDE image builder * Add more device profiles for LEDE image builder * Various bugfixes and improvements 2018-05-15 07:45:29 +00:00			`# Save CA certificate`
			`mkdir -p /etc/certidude/authority/{{ session.authority.hostname }}/`
			`test -e /etc/certidude/authority/{{ session.authority.hostname }}/ca_cert.pem \`
			`\|\| cat << EOF > /etc/certidude/authority/{{ session.authority.hostname }}/ca_cert.pem`
Several updates #2 * Reverse RDN components for all certs * Less side effects in unittests * Split help dialog shell snippets into separate files * Restore 'admin subnets' config option * Embedded subnets, IKE and ESP proposals now configurable in builder.conf * Use expr instead of bc for math operations in shell * Better frontend support for Let's Encrypt certificates 2018-05-02 08:11:01 +00:00			`{{ session.authority.certificate.blob }}EOF`