日々の破片

_ GPKIをubuntuに導入するitamae用レシピ

#
# install GPKI
#
 
execute 'fetch GPKI cert' do
  user '<%= node['user'] %>'
  command <<EOD
curl https://www.gpki.go.jp/apca2/APCA2Root.der >APCA2Root.der;
openssl x509 -inform DER -outform PEM -in APCA2Root.der -out APCA2Root.pem;
openssl x509 -in APCA2Root.pem -inform PEM -out APCA2Root.crt;
EOD
end
 
directory '/usr/share/ca-certificates/extra' do
  owner 'root'
  group 'root'
  action :create
end
 
execute 'copy GPKI crt and register it' do
  user 'root'
  command <<EOD
cp APCA2Root.crt /usr/share/ca-certificates/extra/APCA2Root.crt;
DEBIAN_FRONTEND=noninteractive dpkg-reconfigure ca-certificates;
update-ca-certificates --fresh;
EOD
end