aboutsummaryrefslogtreecommitdiffstats
path: root/onap-offline/bash/tools/certificates/self_extract_cacert.sh
blob: 1e7a5abc49ef06a8411902dc82427fc391887eee (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
#! /bin/sh

#   COPYRIGHT NOTICE STARTS HERE
#
#   Copyright 2018 © Samsung Electronics Co., Ltd.
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.
#
#   COPYRIGHT NOTICE ENDS HERE



extract_ca() {
    cpath=$1
    sed '0,/^#EOF#$/d' $0 > $cpath;
    echo "Certificate installed into: $cpath"
}

OS_ID=$(awk -F= '/^ID=/{print $2}' /etc/os-release)
OS_ID="${OS_ID%\"}"
OS_ID="${OS_ID#\"}"

if [ "$OS_ID" = "rhel" -o "$OS_ID" = "centos" ]; then
    # for centos/ rhel
    echo "Detected rhel like distribution"

    update-ca-trust force-enable
    extract_ca /etc/pki/ca-trust/source/anchors/rootCAcert.crt
    update-ca-trust extract

elif [ "$OS_ID" = "ubuntu" ]; then
    echo "Detected ubuntu distribution"

    mkdir -p /usr/local/share/ca-certificates/extra
    extract_ca /usr/local/share/ca-certificates/extra/rootCAcert.crt
    update-ca-certificates
else
    echo "OS $OS_ID is not supported"
    exit -2
fi

echo "** Please restart docker (because of reload new CA) **"

exit 0
#EOF#