Commit 6f2fc337 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

feat: support CA certs provided as file

parent 6bf3ec36

templates/gitlab-ci-python.yml

+13 −4
Original line number Diff line number Diff line
@@ -440,6 +440,15 @@ variables: 
    fi

  }



  function as_content() {

    file_or_content=$1

    if [[ -f "${file_or_content}" ]]; then

      cat "${file_or_content}"

    else

      echo "${file_or_content}"

    fi

  }



  function install_ca_certs() {

    certs=$1

    if [[ -z "$certs" ]]
@@ -448,11 +457,11 @@ variables: 
    fi



    # import in system

    if echo "$certs" >> /etc/ssl/certs/ca-certificates.crt

    if as_content "$certs" >> /etc/ssl/certs/ca-certificates.crt

    then

      log_info "CA certificates imported in \\e[33;1m/etc/ssl/certs/ca-certificates.crt\\e[0m"

    fi

    if echo "$certs" >> /etc/ssl/cert.pem

    if as_content "$certs" >> /etc/ssl/cert.pem

    then

      log_info "CA certificates imported in \\e[33;1m/etc/ssl/cert.pem\\e[0m"

    fi
@@ -467,12 +476,12 @@ variables: 
      if [[ -f "$keystore" ]]

      then

        storepass=${JAVA_KEYSTORE_PASSWORD:-changeit}

        nb_certs=$(echo "$certs" | grep -c 'END CERTIFICATE')

        nb_certs=$(as_content "$certs" | grep -c 'END CERTIFICATE')

        log_info "importing $nb_certs certificates in Java keystore \\e[33;1m$keystore\\e[0m..."

        for idx in $(seq 0 $((nb_certs - 1)))

        do

          # TODO: use keytool option -trustcacerts ?

          if echo "$certs" | awk "n==$idx { print }; /END CERTIFICATE/ { n++ }" | keytool -noprompt -import -alias "imported CA Cert $idx" -keystore "$keystore" -storepass "$storepass"

          if as_content "$certs" | awk "n==$idx { print }; /END CERTIFICATE/ { n++ }" | keytool -noprompt -import -alias "imported CA Cert $idx" -keystore "$keystore" -storepass "$storepass"

          then

            log_info "... CA certificate [$idx] successfully imported"

          else