Browse Source

Switch xmpp cert path

Bob Mottram 7 years ago
parent
commit
c85dc2e33c
1 changed files with 13 additions and 18 deletions
  1. 13
    18
      src/freedombone-app-xmpp

+ 13
- 18
src/freedombone-app-xmpp View File

@@ -638,7 +638,7 @@ function xmpp_create_config {
638 638
     echo 'https_ports = { 5281 }' >> /etc/prosody/prosody.cfg.lua
639 639
     echo 'https_interfaces = { "*" }' >> /etc/prosody/prosody.cfg.lua
640 640
     echo 'https_ssl = {' >> /etc/prosody/prosody.cfg.lua
641
-    if [ -f /etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
641
+    if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
642 642
         echo "    certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
643 643
     else
644 644
         echo "    certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
@@ -652,7 +652,7 @@ function xmpp_create_config {
652 652
     echo '' >> /etc/prosody/prosody.cfg.lua
653 653
     echo 'ssl = {' >> /etc/prosody/prosody.cfg.lua
654 654
     echo "    key = \"/etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key\";" >> /etc/prosody/prosody.cfg.lua
655
-    if [ -f /etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
655
+    if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
656 656
         echo "    certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
657 657
     else
658 658
         echo "    certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
@@ -686,17 +686,17 @@ function xmpp_create_config {
686 686
         echo "VirtualHost \"${DEFAULT_DOMAIN_NAME}\"" >> /etc/prosody/prosody.cfg.lua
687 687
     fi
688 688
     echo '    ssl = {' >> /etc/prosody/prosody.cfg.lua
689
-    echo "        key = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key\";" >> /etc/prosody/prosody.cfg.lua
690
-    if [ -f /etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
691
-        echo "        certificate = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
689
+    echo "        key = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.key\";" >> /etc/prosody/prosody.cfg.lua
690
+    if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
691
+        echo "        certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
692 692
     else
693
-        echo "        certificate = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
693
+        echo "        certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
694 694
     fi
695 695
     echo "        curve = $XMPP_ECC_CURVE;" >> /etc/prosody/prosody.cfg.lua
696 696
     echo '        depth = "2";' >> /etc/prosody/prosody.cfg.lua
697 697
     echo "        ciphers = $XMPP_CIPHERS;" >> /etc/prosody/prosody.cfg.lua
698 698
     echo '        options = {"no_sslv2", "no_sslv3" };' >> /etc/prosody/prosody.cfg.lua
699
-    echo "        dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" >> /etc/prosody/prosody.cfg.lua
699
+    echo "        dhparam = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" >> /etc/prosody/prosody.cfg.lua
700 700
     echo '    }' >> /etc/prosody/prosody.cfg.lua
701 701
     echo '' >> /etc/prosody/prosody.cfg.lua
702 702
     echo 'Include "conf.d/*.cfg.lua"' >> /etc/prosody/prosody.cfg.lua
@@ -841,22 +841,19 @@ function install_xmpp {
841 841
     chown root:default /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.*
842 842
 
843 843
     cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
844
-    if [ ! -d /etc/prosody/certs ]; then
845
-        mkdir /etc/prosody/certs
846
-    fi
847 844
 
848 845
     if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME} pem)" == "1" ]]; then
849
-        sed -i "s|/etc/prosody/certs/example.com.key|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
850
-        sed -i "s|/etc/prosody/certs/example.com.crt|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/prosody/conf.avail/xmpp.cfg.lua
846
+        sed -i "s|key =.*|key = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
847
+        sed -i "s|certificate =.*|certificate = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/prosody/conf.avail/xmpp.cfg.lua
851 848
     else
852
-        sed -i 's|/etc/prosody/certs/example.com.key|/etc/prosody/certs/xmpp.key|g' /etc/prosody/conf.avail/xmpp.cfg.lua
853
-        sed -i 's|/etc/prosody/certs/example.com.crt|/etc/prosody/certs/xmpp.crt|g' /etc/prosody/conf.avail/xmpp.cfg.lua
849
+        sed -i "s|key =.*|key = /etc/ssl/privates/xmpp.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
850
+        sed -i "s|certificate =.*|certificate = /etc/ssl/certs/xmpp.crt|g" /etc/prosody/conf.avail/xmpp.cfg.lua
854 851
     fi
855 852
     if ! grep -q "xmpp.dhparam" /etc/prosody/conf.avail/xmpp.cfg.lua; then
856 853
         if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME})" == "1" ]]; then
857
-            sed -i "/certificate =/a\        dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" /etc/prosody/conf.avail/xmpp.cfg.lua
854
+            sed -i "/certificate =/a\        dhparam = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" /etc/prosody/conf.avail/xmpp.cfg.lua
858 855
         else
859
-            sed -i '/certificate =/a\        dhparam = "/etc/prosody/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
856
+            sed -i '/certificate =/a\        dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
860 857
         fi
861 858
     fi
862 859
     if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/conf.avail/xmpp.cfg.lua; then
@@ -935,8 +932,6 @@ function install_xmpp {
935 932
     configure_firewall_for_xmpp
936 933
     xmpp_email_headers
937 934
 
938
-    cp /etc/ssl/certs/xmpp.* /etc/prosody/certs
939
-    cp /etc/ssl/private/xmpp.* /etc/prosody/certs
940 935
     update_default_domain
941 936
 
942 937
     xmpp_create_config