mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-09-21 03:45:47 +02:00
Step ca leaf data patch (#15210)
* Change issuingCertificateURL and crlDistributionPoints format * Patch leaf_data.tpl to fix formatting issue Remove square brackets from leaf_data.tpl template file. * Update provisioners with x509 template data Added a patch for updating provisioners with template data.
This commit is contained in:
@@ -37,6 +37,22 @@ function update_script() {
|
|||||||
rm -f "$STEPBIN"
|
rm -f "$STEPBIN"
|
||||||
cp -f "$(which step-cli)" "$STEPBIN"
|
cp -f "$(which step-cli)" "$STEPBIN"
|
||||||
|
|
||||||
|
# Patch for leaf_data.tpl - Issue: #14810
|
||||||
|
sed -i \
|
||||||
|
-e 's/\[//' \
|
||||||
|
-e 's/\]//' \
|
||||||
|
"$STEPPATH/templates/x509/leaf_data.tpl"
|
||||||
|
|
||||||
|
# Patch for provisioners templateData - Issue: #14810
|
||||||
|
step ca provisioner list | jq -c '.[] | select(.options.x509.templateData != null) | .name' > /tmp/provisioner_names.json
|
||||||
|
for i in $(cat /tmp/provisioner_names.json); do
|
||||||
|
prov=`echo $i | tr -d '"'`
|
||||||
|
echo
|
||||||
|
echo "Updating provisioner $prov ..."
|
||||||
|
$STD step ca provisioner update $prov --x509-template-data=$STEPPATH/templates/x509/leaf_data.tpl
|
||||||
|
done
|
||||||
|
rm /tmp/provisioner_names.json
|
||||||
|
|
||||||
$STD systemctl restart step-ca
|
$STD systemctl restart step-ca
|
||||||
msg_ok "Updated step-ca and step-cli"
|
msg_ok "Updated step-ca and step-cli"
|
||||||
|
|
||||||
|
|||||||
@@ -183,8 +183,8 @@ cat <<EOF >"$X509LeafTemplateData"
|
|||||||
"country": "${PKICountry}",
|
"country": "${PKICountry}",
|
||||||
"organization": "${PKIName}",
|
"organization": "${PKIName}",
|
||||||
"organizationalUnit": "${PKIOrganizationalUnit}",
|
"organizationalUnit": "${PKIOrganizationalUnit}",
|
||||||
"issuingCertificateURL": ["https://${FQDN}${LISTENER}/intermediates.pem"],
|
"issuingCertificateURL": "https://${FQDN}${LISTENER}/intermediates.pem",
|
||||||
"crlDistributionPoints": ["https://${FQDN}${LISTENER}/crl"]
|
"crlDistributionPoints": "https://${FQDN}${LISTENER}/crl"
|
||||||
}
|
}
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user