mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
Prageeth Panicker
4b07cc7999
The platform always sets CA_TRUST_NAME together with CA_TRUST_CERT, so the infinito-dev-ca default was dead code that could hide a missing setting. The entrypoint now fails with a clear message instead.
12 lines
526 B
Bash
Executable File
12 lines
526 B
Bash
Executable File
#!/usr/bin/env bash
|
|
if [ -n "${CA_TRUST_CERT:-}" ] && [ -r "${CA_TRUST_CERT}" ]; then
|
|
CACERTS="/usr/share/wazuh-indexer/jdk/lib/security/cacerts"
|
|
ALIAS="${CA_TRUST_NAME:?CA_TRUST_NAME must accompany CA_TRUST_CERT}"
|
|
KEYTOOL="/usr/share/wazuh-indexer/jdk/bin/keytool"
|
|
if ! "$KEYTOOL" -list -keystore "$CACERTS" -storepass changeit -alias "$ALIAS" >/dev/null 2>&1; then
|
|
"$KEYTOOL" -importcert -noprompt -alias "$ALIAS" -file "$CA_TRUST_CERT" -keystore "$CACERTS" -storepass changeit
|
|
fi
|
|
fi
|
|
|
|
exec /entrypoint.sh "$@"
|