aboutsummaryrefslogtreecommitdiff
path: root/control
diff options
context:
space:
mode:
authorPaul Sokolovsky <paul.sokolovsky@linaro.org>2011-04-14 13:06:43 +0300
committerPaul Sokolovsky <paul.sokolovsky@linaro.org>2011-04-14 13:06:43 +0300
commita7a5876a83f2db7f7c038ea66a6b6f4f9e66a09e (patch)
treebb6ce71d2569a3e29f616dd94ec018174f91cf1f /control
parent66bd17000982b1174bf2fdaca20bf6f66a17b4e0 (diff)
Fix up SSL configuration (certificate generation, etc.)
Diffstat (limited to 'control')
-rwxr-xr-xcontrol/setup-control-node8
1 files changed, 5 insertions, 3 deletions
diff --git a/control/setup-control-node b/control/setup-control-node
index a5431ef..500a6a2 100755
--- a/control/setup-control-node
+++ b/control/setup-control-node
@@ -60,9 +60,10 @@ sudo a2enmod proxy_http
sudo a2enmod headers
sudo a2enmod rewrite
sudo a2enmod expires
+sudo a2enmod ssl
# make self-signed certificate
-cat <<EOF > /tmp/ssleay.conf
+cat <<EOF > /tmp/ssleay.cnf
RANDFILE = /dev/urandom
[ req ]
default_bits = 1024
@@ -73,8 +74,9 @@ policy = policy_anything
[ req_distinguished_name ]
commonName = android-build.linaro.org
EOF
-sudo openssl req -config /tmp/ssleay.cnf -new -x509 -days 3650 -nodes -out /etc/ssl/private/android-build.linaro.org.crt
-sudo chmod go-a /etc/ssl/private/android-build.linaro.org.crt
+CERT_PATH=/etc/ssl/private/android-build.linaro.org.crt
+sudo openssl req -config /tmp/ssleay.cnf -new -x509 -days 3650 -nodes -out $CERT_PATH -keyout $CERT_PATH
+sudo chmod 0600 /etc/ssl/private/android-build.linaro.org.crt
rm /tmp/ssleay.conf
cat <<EOF | sudo tee /etc/apache2/conf.d/extra-port > /dev/null