blob: 0b44aa0e6fe9015fc03265dbbfa4eb17c85091a2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
# arg 1: the new package version
post_install() {
if [ ! -d /var/cache/pixelserv ]; then
/bin/mkdir /var/cache/pixelserv
fi
/bin/chown -R nobody:root /var/cache/pixelserv
/bin/chmod -R 755 /var/cache/pixelserv
cat << EOF
In order to use pixelserv-tls you need to:
1. create root CA certificate https://git.io/vNuoH
cd /var/cache/pixelserv
sudo -u nobody openssl genrsa -out ca.key 1024
sudo -u nobody openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"
2. import CA certificate
cp /var/cache/pixelserv/ca.crt /usr/share/ca-certificates/trust-source/anchors/ca.pixelserv.crt
trust extract-compat
... OR just run script as user "nobody":
sudo -u nobody pixelserv-ca-init
... THEN start/enable systemd service:
sudo systemctl enable --now pixelserv-tls
EOF
}
# arg 1: the new package version
# arg 2: the old package version
post_upgrade() {
post_install
}
# arg 1: the old package version
post_remove() {
cat << EOF
If you won't use pixelserv-tls anymore you may remove "Pixelserv CA" certificate
and pixelserv-tls's cert folder using:
rm /usr/share/ca-certificates/trust-source/anchors/ca.pixelserv.crt
trust extract-compat
rm -rf /var/cache/pixelserv
EOF
}
|