0020811: Fix OpenLDAP certificate issue

ClearFoundation Tracker - ClearOS

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0020811

ClearOS

app-openldap - OpenLDAP Driver

public

2018-07-18 09:39

2019-02-23 12:58

Reporter

user2

Assigned To

dloper

Priority

normal

Severity

tweak

Reproducibility

have not tried

Status

closed

Resolution

suspended

Platform

OS Version

Product Version

7.5.0

Target Version

7.6.0 Updates

Fixed in Version

Summary

0020811: Fix OpenLDAP certificate issue

Description

The bootstrap certificates can be mismatched in some cases. Here's the problematic bit of code:

KEY_SOURCE=/etc/pki/CA/bootstrap.key
KEY=/etc/openldap/cacerts/key.pem

if [ ! -s "$KEY" ]; then
    logger -p local6.notice -t installer "app-openldap-core - prepping server key"
    cp $KEY_SOURCE $KEY
    chown root.ldap $KEY
    chmod 640 $KEY
fi

CRT_SOURCE=/etc/pki/CA/bootstrap.crt
CRT=/etc/openldap/cacerts/cert.pem

if [ ! -s "$CRT" ]; then
    logger -p local6.notice -t installer "app-openldap-core - prepping server certificate"
    cp $CRT_SOURCE $CRT
    chown root.ldap $CRT
    chmod 640 $CRT
fi

The key/pair should always be copied at the same time.

Steps To Reproduce

Additional Information