commit beffca972c4f5f7a17ab158b2103e4b21c0463db Author: Alexandre CATTEAU Date: Sun Nov 13 12:13:34 2022 +0100 Initial commit diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..a4603f7 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.disabled diff --git a/README.md b/README.md new file mode 100644 index 0000000..4daabb5 --- /dev/null +++ b/README.md @@ -0,0 +1,8 @@ +# Install KTO Root Certificates + +This repository contains a small setup to automate the delivery of our root certificates to clients. + +### Files +* `kto.crt` is our current only root certificate +#### Installation +* `install.sh` copies the certificates to the right location and then reloads the system's certificates diff --git a/install.sh b/install.sh new file mode 100755 index 0000000..cff34ce --- /dev/null +++ b/install.sh @@ -0,0 +1,28 @@ +#!/usr/bin/env bash + +run_directory=$(dirname $(readlink -f "$0")) +user=$(whoami) + +if [ -f $run_directory/.disabled ]; then + echo "Installation is disabled. Exiting..." + exit 0 +fi + +if [[ $user != 'root' ]]; then + sudo="sudo" +else + sudo="" +fi + +$sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/ +if command -v update-ca-trust > /dev/null; then + $sudo update-ca-trust +elif command -v update-ca-certificates > /dev/null; then + $sudo update-ca-certificates +else + echo "No update-ca binary found. Exiting with error!" + exit 1 +fi + +echo "Finished install. Exiting..." +exit 0 diff --git a/kto.crt b/kto.crt new file mode 100644 index 0000000..119d005 --- /dev/null +++ b/kto.crt @@ -0,0 +1,31 @@ +-----BEGIN CERTIFICATE----- +MIIFazCCA1OgAwIBAgIURz3mSUsJQVoV7ZnhkH5aicqGt0MwDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCRlIxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yMjExMTIxMzExNDZaFw0yNTEx +MTExMzExNDZaMEUxCzAJBgNVBAYTAkZSMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw +HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwggIiMA0GCSqGSIb3DQEB +AQUAA4ICDwAwggIKAoICAQDP5J+xAxjT+fQM2FcW+P/BY6HgdrcxZlSu/c4ipmXB +CKxxE+RHi1rUkv6vqH1xJ0awUvXuMclpYgWnhmxowjLgPm6zH23XnHDm5BInth9n +h/k4IjOPTJQm7/+XpXugmmLDYIK8DIsZGHwbKavJ1maC1MZOWvjmRbQ7LiHQqagG +3xpRMXDTZFJSUJN6kE0UpcmrML7UqkGG0ao3XTAqum1tjBoYvbUKMz/d9J4y7ATR +u8DF78sPj/ENbg8d6PGJSSVw/z5TE7DxCaAu9l5CH6Ddb7NE2dh5FnzC7Gv5/JkA +XwNprIthTq3V9rNbEnauFXFJJzOfZ1zru0HNN0sYuGJCO43rjXjDXbOLEJH/4rls +Z5UqpZTOKl45mL87U56H5Py/fmlRSaICS/WbWnfyrqdudvlPJixwQaTeM2W6IE/I +wAlTUPQxYO7mJeD6VDBgrLujVU4Aurdl9OzTKmcfTg75512bvsJ+mShqcRcrpoA0 +Cm1lKv/FDDL5rhzk4A4Z4lWlz8isoFHVKXwtpc1vhNmcq+YTCT+75y4cGR9I37LE +3wBrgIf9L5iedZ3xRJ2DMQZiIN2FfW5JQNI1LbKFrznrzjJcZLrFI3+ikgj2qItL +oCS89l65Sfp8LhHPCr/3m+5gNzESfmwqk2E/0vN5UiTrE+PI/wSg8vostl3Z5J+P +WwIDAQABo1MwUTAdBgNVHQ4EFgQUvnxhPGdEOGGu0SU7yR3N/O3luLkwHwYDVR0j +BBgwFoAUvnxhPGdEOGGu0SU7yR3N/O3luLkwDwYDVR0TAQH/BAUwAwEB/zANBgkq +hkiG9w0BAQsFAAOCAgEAsMLYmw7CuCOdotCaEVZEISoPUKFXCUowthoeZ41GR/ol +j2tFCTVxrSIJZqCzDPb5H3zezkGetp4/9woiL3+3Jcr5WKY6T42Fnt9JDPmich1C +UkUazmRdqD8n0tai8sBf2Z1NjpkKIRDJGfYfbgm+AQ8s0nts5dXctRuCPTltHvRS +/qh1KK4EvzTzRBrgYO2dSPtHnrGGSz0N511MdQ6z4pUDnkesAtwcUOzKA63gDZeF +UpQAVP5Q/E2zQRXgclwKCKC21OKVjn8mEkoZ4iNZx7y5XSK9PEH/8LnTKIQPLWgT +A8q1yCCVC/gqfZA1EZjcuLvV+Lf1DGosSLJ5kKIHyYeV++raCZugQgJ3K2NmmwqH +dYRzxyjc4TN8Tdm4GJOB1IqzwdF8hU8lB9wUq3fcIDb810KaOCM+37mBznFqYtc6 +xp9uUUab6tP3w9gr1UEEQDIJKy5B/nlB/x2ZI6rH2BUfzzOMdhsRxS4dYTqgyTcb +PTMTeoMl434CdQQYHzCGXMraPChUI472ihFXShR72sfTSMf0UQAx1l5+vtVDwBON +W6HOvKxPuJaR7/Ex+h1ZG58X2m5nqiMAAidIvi78D3SD51/yzTkunx+3KDy1fIav +ib6Rrim+ZMYiXaP5cK6N8ivfxj8ClcKuBnU4m4Zq8Xc2F8Y7qcvbKavqy6iHOOc= +-----END CERTIFICATE-----