From 60b16ebddccee91b242296ce434fe1b8e631cef7 Mon Sep 17 00:00:00 2001 From: toby Date: Tue, 16 Apr 2019 21:48:29 +0000 Subject: [PATCH] forcing the curl to be over IPv6, allows us to close the firewall for ipv4 --- debian/wit-network-config.postinst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/debian/wit-network-config.postinst b/debian/wit-network-config.postinst index a1b5b0b..5745ca8 100755 --- a/debian/wit-network-config.postinst +++ b/debian/wit-network-config.postinst @@ -388,10 +388,10 @@ case "$1" in if [ ! -e $KEYFILE ]; then pki --gen --type rsa --size 2048 --outform pem >${KEYFILE} - pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, CN=${HOSTNAME}" --san "${HOSTNAME}" --outform pem | curl --fail -T - ${CACURLURL}/reqs/${REQFILE##*/} + pki --req --in ${KEYFILE} --type rsa --digest sha512 --dn "C=US, O=Wit, CN=${HOSTNAME}" --san "${HOSTNAME}" --outform pem | curl -6 --fail -T - ${CACURLURL}/reqs/${REQFILE##*/} - curl --fail -so ${CAFILE} ${CACURLURL}/cacerts/${CAFILE##*/} - curl --fail -so ${CRLFILE} ${CACURLURL}/crls/${CRLFILE##*/} + curl -6 --fail -so ${CAFILE} ${CACURLURL}/cacerts/${CAFILE##*/} + curl -6 --fail -so ${CRLFILE} ${CACURLURL}/crls/${CRLFILE##*/} cat <<-EOF >/etc/cron.d/wit-net-config-pull-signed-cert