mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-06-19 14:01:21 +02:00
Step ca leaf data patch (#15210)
* Change issuingCertificateURL and crlDistributionPoints format * Patch leaf_data.tpl to fix formatting issue Remove square brackets from leaf_data.tpl template file. * Update provisioners with x509 template data Added a patch for updating provisioners with template data.
This commit is contained in:
@@ -37,6 +37,22 @@ function update_script() {
|
||||
rm -f "$STEPBIN"
|
||||
cp -f "$(which step-cli)" "$STEPBIN"
|
||||
|
||||
# Patch for leaf_data.tpl - Issue: #14810
|
||||
sed -i \
|
||||
-e 's/\[//' \
|
||||
-e 's/\]//' \
|
||||
"$STEPPATH/templates/x509/leaf_data.tpl"
|
||||
|
||||
# Patch for provisioners templateData - Issue: #14810
|
||||
step ca provisioner list | jq -c '.[] | select(.options.x509.templateData != null) | .name' > /tmp/provisioner_names.json
|
||||
for i in $(cat /tmp/provisioner_names.json); do
|
||||
prov=`echo $i | tr -d '"'`
|
||||
echo
|
||||
echo "Updating provisioner $prov ..."
|
||||
$STD step ca provisioner update $prov --x509-template-data=$STEPPATH/templates/x509/leaf_data.tpl
|
||||
done
|
||||
rm /tmp/provisioner_names.json
|
||||
|
||||
$STD systemctl restart step-ca
|
||||
msg_ok "Updated step-ca and step-cli"
|
||||
|
||||
|
||||
@@ -183,8 +183,8 @@ cat <<EOF >"$X509LeafTemplateData"
|
||||
"country": "${PKICountry}",
|
||||
"organization": "${PKIName}",
|
||||
"organizationalUnit": "${PKIOrganizationalUnit}",
|
||||
"issuingCertificateURL": ["https://${FQDN}${LISTENER}/intermediates.pem"],
|
||||
"crlDistributionPoints": ["https://${FQDN}${LISTENER}/crl"]
|
||||
"issuingCertificateURL": "https://${FQDN}${LISTENER}/intermediates.pem",
|
||||
"crlDistributionPoints": "https://${FQDN}${LISTENER}/crl"
|
||||
}
|
||||
EOF
|
||||
|
||||
|
||||
Reference in New Issue
Block a user