瀏覽代碼

Import SSL certificates

Bob Mottram 10 年之前
父節點
當前提交
029119e61f
共有 1 個檔案被更改,包括 20 行新增4 行删除
  1. 20
    4
      install-freedombone.sh

+ 20
- 4
install-freedombone.sh 查看文件

429
           cp -r $USB_MOUNT/.emacs.d /home/$MY_USERNAME
429
           cp -r $USB_MOUNT/.emacs.d /home/$MY_USERNAME
430
           chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs.d
430
           chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.emacs.d
431
       fi
431
       fi
432
+      if [ -d $USB_MOUNT/ssl ]; then
433
+          echo 'Importing SSL certificates'
434
+          cp -r $USB_MOUNT/ssl/* /etc/ssl
435
+          chmod 640 /etc/ssl/certs/*
436
+          chmod 400 /etc/ssl/private/*
437
+		  # change ownership of some certificates
438
+		  if [ -f /etc/ssl/private/xmpp.key ]; then
439
+			  chown prosody:prosody /etc/ssl/private/xmpp.*
440
+			  chown prosody:prosody /etc/ssl/certs/xmpp.*
441
+		  fi
442
+		  if [ -f /etc/ssl/private/dovecot.key ]; then
443
+			  chown root:dovecot /etc/ssl/certs/dovecot.*
444
+			  chown root:dovecot /etc/ssl/private/dovecot.*
445
+		  fi
446
+      fi
432
       if [ -d $USB_MOUNT/personal ]; then
447
       if [ -d $USB_MOUNT/personal ]; then
433
           echo 'Importing personal directory'
448
           echo 'Importing personal directory'
434
           cp -r $USB_MOUNT/personal /home/$MY_USERNAME
449
           cp -r $USB_MOUNT/personal /home/$MY_USERNAME
1229
       return
1244
       return
1230
   fi
1245
   fi
1231
   apt-get -y --force-yes install dovecot-common dovecot-imapd
1246
   apt-get -y --force-yes install dovecot-common dovecot-imapd
1232
-  makecert dovecot
1233
-  chown root:dovecot /etc/ssl/certs/dovecot.crt
1234
-  chown root:dovecot /etc/ssl/private/dovecot.key
1235
-  chown root:dovecot /etc/ssl/private/dovecot.dhparams
1247
+  if [ ! -f /etc/ssl/private/dovecot.key ]; then
1248
+	  makecert dovecot
1249
+  fi
1250
+  chown root:dovecot /etc/ssl/certs/dovecot.*
1251
+  chown root:dovecot /etc/ssl/private/dovecot.*
1236
 
1252
 
1237
   sed -i 's|#ssl = yes|ssl = yes|g' /etc/dovecot/conf.d/10-ssl.conf
1253
   sed -i 's|#ssl = yes|ssl = yes|g' /etc/dovecot/conf.d/10-ssl.conf
1238
   sed -i 's|ssl_cert = </etc/dovecot/dovecot.pem|ssl_cert = </etc/ssl/certs/dovecot.crt|g' /etc/dovecot/conf.d/10-ssl.conf
1254
   sed -i 's|ssl_cert = </etc/dovecot/dovecot.pem|ssl_cert = </etc/ssl/certs/dovecot.crt|g' /etc/dovecot/conf.d/10-ssl.conf