diff options
| -rw-r--r-- | PKGBUILD | 4 | ||||
| -rwxr-xr-x | pixelserv-ca-init.sh | 8 | ||||
| -rw-r--r-- | pixelserv-tls.install | 8 |
3 files changed, 10 insertions, 10 deletions
@@ -1,7 +1,7 @@ # Maintainer: Zhanibek Adilbekov <zhanibek.adilbekov@protornmail.com> pkgname=pixelserv-tls pkgver=2.2.0 -pkgrel=3 +pkgrel=4 pkgdesc="A tiny bespoke webserver for adblock with HTTP/1.1 and HTTPS support" arch=('any') url="https://kazoo.ga/pixelserv-tls/" @@ -13,7 +13,7 @@ source=( "pixelserv-ca-init.sh" "pixelserv-tls.service") md5sums=('fee16251b14fef4509476685e364c360' - '1bc930094d645b39aadf2861197cdb12' + 'a1c0b49b4e2e6653dbf96239ecc31c55' '70e0895550f301303e09eb5dfabdde42') diff --git a/pixelserv-ca-init.sh b/pixelserv-ca-init.sh index 9f6470a5e425..74d7066277be 100755 --- a/pixelserv-ca-init.sh +++ b/pixelserv-ca-init.sh @@ -1,10 +1,10 @@ #!/bin/sh # generate cert -openssl genrsa -out /var/cache/pixelserv/ca.key 1024 -openssl req -key /var/cache/pixelserv/ca.key -new -x509 -days 3650 -sha256 \ +sudo -u nobody openssl genrsa -out /var/cache/pixelserv/ca.key 1024 +sudo -u nobody openssl req -key /var/cache/pixelserv/ca.key -new -x509 -days 3650 -sha256 \ -extensions v3_ca -out /var/cache/pixelserv/ca.crt -subj "/CN=Pixelserv CA" # trust cert -cp /var/cache/pixelserv/ca.crt /usr/share/ca-certificates/trust-source/anchors/ca.pixelserv.crt -trust extract-compat +sudo cp /var/cache/pixelserv/ca.crt /usr/share/ca-certificates/trust-source/anchors/ca.pixelserv.crt +sudo trust extract-compat diff --git a/pixelserv-tls.install b/pixelserv-tls.install index 0b44aa0e6fe9..82b3320854cd 100644 --- a/pixelserv-tls.install +++ b/pixelserv-tls.install @@ -16,12 +16,12 @@ cat << EOF 2. import CA certificate - cp /var/cache/pixelserv/ca.crt /usr/share/ca-certificates/trust-source/anchors/ca.pixelserv.crt - trust extract-compat + sudo cp /var/cache/pixelserv/ca.crt /usr/share/ca-certificates/trust-source/anchors/ca.pixelserv.crt + sudo trust extract-compat - ... OR just run script as user "nobody": + ... OR just run script (as your current user!): - sudo -u nobody pixelserv-ca-init + pixelserv-ca-init ... THEN start/enable systemd service: sudo systemctl enable --now pixelserv-tls |