TT#177600 Move SSL certificates under /etc/ngcp-config/shared-files/ssl

These are shared files across all PRO/Carrier nodes, but at the time
they were introduced we did not have the concept of a shared-files
subdirectory. All other such shared files have been moved over time to
that subdirectory, but this was still remaining behind. Let's move it
now for consistency, and so that its purpose is more clear.

Change-Id: I05762d66c352b8ebee34ae93d952d9ffd58910fb
mr11.0
Guillem Jover 4 years ago
parent 6cb0ea05e0
commit 0e5a529153

@ -189,9 +189,9 @@ log4perl.appender.Default.layout.ConversionPattern=%d{ISO8601} [%p] [%F +%L] %m{
</numbermanagement>
<ssl>
rest_api_keyfile /etc/ngcp-config/ssl/api_ca.key
rest_api_certfile /etc/ngcp-config/ssl/api_ca.crt
server_certfile /etc/ngcp-config/ssl/myserver.crt
rest_api_keyfile /etc/ngcp-config/shared-files/ssl/api_ca.key
rest_api_certfile /etc/ngcp-config/shared-files/ssl/api_ca.crt
server_certfile /etc/ngcp-config/shared-files/ssl/myserver.crt
</ssl>
<deviceprovisioning>

@ -67,7 +67,7 @@ sub check_ca_errors {
$error = "Failed to check CA certificate: $stdout";
}
$command = 'openssl verify ' . $c->config->{ssl}->{rest_api_certfile};
#$command = 'openssl verify /etc/ngcp-config/ssl/client-auth-ca.crt';
#$command = 'openssl verify /etc/ngcp-config/shared-files/ssl/client-auth-ca.crt';
$c->log->debug($command);
$stdout = `$command 2>&1` // "";
if ($stdout =~ m/certificate has expired/) {

@ -16,7 +16,7 @@ if [ -z "${1:-}" ] ; then
echo
echo "Usage example:
$0 /etc/ngcp-config/ssl /usr/share/ngcp-panel-tools myserver
$0 /etc/ngcp-config/shared-files/ssl /usr/share/ngcp-panel-tools myserver
"
exit 1
fi

Loading…
Cancel
Save