mirror of
https://github.com/kasmtech/KasmVNC.git
synced 2024-11-29 03:23:09 +01:00
eaa5c24439
I piggyback on ssl-cert package that's got ssl-cert group and the directory /etc/ssl/private, the group can read files from (but not list files there). Thus, by adding a user to ssl-cert group, they can read both ssl-cert certificates and the KasmVNC certificate.o Note: currently, KasmVNC only supports one file that must contain both private and public keys. For this reason, I didn't use the snakeoil certificate from ssl-cert, as it's split into two files.
63 lines
1.8 KiB
Bash
63 lines
1.8 KiB
Bash
#!/bin/sh
|
|
# postinst script for kasmvnc
|
|
#
|
|
# see: dh_installdeb(1)
|
|
|
|
set -e
|
|
|
|
# summary of how this script can be called:
|
|
# * <postinst> `configure' <most-recently-configured-version>
|
|
# * <old-postinst> `abort-upgrade' <new version>
|
|
# * <conflictor's-postinst> `abort-remove' `in-favour' <package>
|
|
# <new-version>
|
|
# * <postinst> `abort-remove'
|
|
# * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
|
|
# <failed-install-package> <version> `removing'
|
|
# <conflicting-package> <version>
|
|
# for details, see https://www.debian.org/doc/debian-policy/ or
|
|
# the debian-policy package
|
|
|
|
make_self_signed_certificate() {
|
|
local cert_file=/etc/ssl/private/kasmvnc.pem
|
|
[ -f "$cert_file" ] && return 0
|
|
|
|
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout "$cert_file" \
|
|
-out "$cert_file" -subj \
|
|
"/C=US/ST=VA/L=None/O=None/OU=DoFu/CN=kasm/emailAddress=none@none.none"
|
|
chgrp ssl-cert "$cert_file"
|
|
chmod g+r "$cert_file"
|
|
}
|
|
|
|
case "$1" in
|
|
configure)
|
|
bindir=/usr/bin
|
|
mandir=/usr/share/man
|
|
commands="kasmvncserver kasmvncpasswd kasmvncconfig Xkasmvnc"
|
|
|
|
for kasm_command in $commands; do
|
|
generic_command=`echo "$kasm_command" | sed -e 's/kasm//'`;
|
|
update-alternatives --install "$bindir/$generic_command" \
|
|
"$generic_command" "$bindir/$kasm_command" 90 \
|
|
--slave "$mandir/man1/$generic_command.1.gz" "$generic_command.1.gz" \
|
|
"$mandir/man1/$kasm_command.1.gz"
|
|
done
|
|
|
|
make_self_signed_certificate
|
|
;;
|
|
|
|
abort-upgrade|abort-remove|abort-deconfigure)
|
|
;;
|
|
|
|
*)
|
|
echo "postinst called with unknown argument \`$1'" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
# dh_installdeb will replace this with shell code automatically
|
|
# generated by other debhelper scripts.
|
|
|
|
#DEBHELPER#
|
|
|
|
exit 0
|