From 72254ce79c8f33d85e9eb962ceb7126fc72f4252 Mon Sep 17 00:00:00 2001 From: jbjohnso Date: Wed, 11 Apr 2012 13:39:51 +0000 Subject: [PATCH] Provide a hook for TLS cert delivery by updates.img. Note this is of little use in a PXE environment today, as MITM to the initrd or ipxe subverts all of this. This however is interesting for secure boot environments and remote media boot strap to provide an unbroken trust chain git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@12198 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd --- xCAT-server/share/xcat/install/scripts/pre.rh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/xCAT-server/share/xcat/install/scripts/pre.rh b/xCAT-server/share/xcat/install/scripts/pre.rh index fa1889dac..7ad041b47 100644 --- a/xCAT-server/share/xcat/install/scripts/pre.rh +++ b/xCAT-server/share/xcat/install/scripts/pre.rh @@ -9,6 +9,10 @@ do done chmod 644 /dev/vcs* chown root /dev/vcs* +if [ -r /tmp/updates/etc/pki/tls/certs/ca-bundle.crt ]; then + cp -f /tmp/updates/etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ +fi + cat >/tmp/foo.py <