jcarr
/
wit-network-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

forcing the curl to be over IPv6, allows us to close the firewall for ipv4

This commit is contained in:
toby 2019-04-16 21:48:29 +00:00
parent 182de8533f
commit 60b16ebddc
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
debian/wit-network-config.postinst vendored
View File

@ -388,10 +388,10 @@ case "$1" in
if [ ! -e $KEYFILE ]; then
pki --gen --type rsa --size 2048 --outform pem >${KEYFILE}
pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, CN=${HOSTNAME}" --san "${HOSTNAME}" --outform pem | curl --fail -T - ${CACURLURL}/reqs/${REQFILE##*/}
pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, CN=${HOSTNAME}" --san "${HOSTNAME}" --outform pem | curl -6 --fail -T - ${CACURLURL}/reqs/${REQFILE##*/}
curl --fail -so ${CAFILE} ${CACURLURL}/cacerts/${CAFILE##*/}
curl --fail -so ${CRLFILE} ${CACURLURL}/crls/${CRLFILE##*/}
curl -6 --fail -so ${CAFILE} ${CACURLURL}/cacerts/${CAFILE##*/}
curl -6 --fail -so ${CRLFILE} ${CACURLURL}/crls/${CRLFILE##*/}
cat <<-EOF >/etc/cron.d/wit-net-config-pull-signed-cert