8407c97d96
API --- Allow the user to pass the CA public certification or skip the verification AWSCloud -------- Restore the old version of newAwsFromCreds for access to AWS Create a new method newAwsFromCredsWithEndpoint for Generic S3 which sets the endpoint and optionally overrides the CA Bundle or skips the SSL certificate verification jobimpl-osbuild --------------- Update with the new parameters osbuild-upload-generic-s3 ------------------------- Add ca-bunlde and skip-ssl-verification flags tests ----- Split the tests into http, https with certificate and https skip certificate check Create a new base test for S3 over HTTPS for secure and insecure Move the generic S3 test to tools to reuse for secure and insecure connections All S3 tests now use the aws cli tool Update the libvirt test to be able to download over HTTPS Update the RPM spec Kill container with sudo
32 lines
711 B
Bash
32 lines
711 B
Bash
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
SECURE=${1}
|
|
|
|
if [[ ${SECURE} == "yes" ]]; then
|
|
CA_CERT_NAME="public.crt"
|
|
fi
|
|
|
|
CERTGEN_VERSION="v1.2.0"
|
|
|
|
TEMPDIR=$(mktemp -d)
|
|
|
|
CERTS_DIR=/var/lib/s3-certs
|
|
sudo rm -rf "${CERTS_DIR}" || true
|
|
sudo mkdir "${CERTS_DIR}"
|
|
|
|
function cleanup() {
|
|
sudo rm -rf "$TEMPDIR" || true
|
|
sudo rm -rf "$CERTS_DIR" || true
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
pushd "${TEMPDIR}"
|
|
curl -L -o certgen "https://github.com/minio/certgen/releases/download/${CERTGEN_VERSION}/certgen-linux-amd64"
|
|
chmod +x certgen
|
|
./certgen -host localhost
|
|
sudo mv private.key public.crt "${CERTS_DIR}"
|
|
popd
|
|
|
|
# Test upload to HTTPS S3 server
|
|
/usr/libexec/osbuild-composer-test/generic_s3_test.sh "${CERTS_DIR}" ${CA_CERT_NAME:-""}
|