extern/workspaces-core-images
1
0
Fork 0
mirror of https://github.com/kasmtech/workspaces-core-images.git synced 2025-06-26 15:01:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

support pre-defined CA cert for squid

Browse Source
This commit is contained in:
mattmcclaskey 2023-06-29 06:54:07 -04:00
parent dcc79b8eec
commit 2724991061
No known key found for this signature in database
1 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/ubuntu/install/squid/resources/start_squid.sh
View File

@ -4,7 +4,7 @@ set -ex
{ {
IP=$(ip route get 1.1.1.1 | grep -oP "src \\K\\S+") IP=$(ip route get 1.1.1.1 | grep -oP "src \\K\\S+")
mkdir /tmp/working_certs mkdir -p /tmp/working_certs
cd /tmp/working_certs cd /tmp/working_certs
if [ -f /etc/centos-release ]; then if [ -f /etc/centos-release ]; then
@ -29,11 +29,18 @@ set -ex
CERT_FILE=/usr/local/share/ca-certificates/squid.crt CERT_FILE=/usr/local/share/ca-certificates/squid.crt
fi fi
CERT_NAME="Squid Root CA" CERT_NAME="Squid Root CA"
if [ ! -f "/usr/local/squid/etc/ssl_cert/squid.pem" ]; then
echo "Generating Squid Cert"
openssl req -new -newkey rsa:2048 -sha256 -days 3650 -nodes -x509 -extensions v3_ca -subj "/C=US/ST=CA/O=Kasm Technologies/CN=kasm.localhost.net" -keyout myCA.pem -out myCA.pem openssl req -new -newkey rsa:2048 -sha256 -days 3650 -nodes -x509 -extensions v3_ca -subj "/C=US/ST=CA/O=Kasm Technologies/CN=kasm.localhost.net" -keyout myCA.pem -out myCA.pem
openssl x509 -in myCA.pem -outform DER -out myCA.der openssl x509 -in myCA.pem -outform DER -out myCA.der
openssl x509 -in myCA.pem -outform DER -out myCA.der openssl x509 -in myCA.pem -outform DER -out myCA.der
cp myCA.pem ${CERT_FILE} cp myCA.pem ${CERT_FILE}
cp myCA.pem /usr/local/squid/etc/ssl_cert/squid.pem cp myCA.pem /usr/local/squid/etc/ssl_cert/squid.pem
else
cp /usr/local/squid/etc/ssl_cert/squid.pem ${CERT_FILE}
fi
if [[ "${DISTRO}" == @(centos|oracle7|fedora) ]]; then if [[ "${DISTRO}" == @(centos|oracle7|fedora) ]]; then
update-ca-trust update-ca-trust
else else