OLD | NEW |
1 #!/bin/bash | 1 #!/bin/bash |
2 | 2 |
3 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved. | 3 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved. |
4 # Use of this source code is governed by a BSD-style license that can be | 4 # Use of this source code is governed by a BSD-style license that can be |
5 # found in the LICENSE file. | 5 # found in the LICENSE file. |
6 | 6 |
7 echo "Adding mock Google Accounts server certs." | 7 echo "Adding mock Google Accounts server certs." |
8 | 8 |
9 case "${ARCH}" in | 9 case "${ARCH}" in |
10 arm*) | 10 arm*) |
(...skipping 26 matching lines...) Expand all Loading... |
37 sudo chroot "${ROOT_FS_DIR}" ${QEMU} \ | 37 sudo chroot "${ROOT_FS_DIR}" ${QEMU} \ |
38 /usr/local/bin/nsscertutil -d sql:"${FAKE_NSSDB}" -N -f <(echo "") | 38 /usr/local/bin/nsscertutil -d sql:"${FAKE_NSSDB}" -N -f <(echo "") |
39 cp "${ROOT_FS_DIR}/${TMP_KEY}" "${ROOT_FS_DIR}/${FAKE_CA_DIR}/${CERT_NAME}.key" | 39 cp "${ROOT_FS_DIR}/${TMP_KEY}" "${ROOT_FS_DIR}/${FAKE_CA_DIR}/${CERT_NAME}.key" |
40 cp "${ROOT_FS_DIR}/${TMP_CERT}" "${ROOT_FS_DIR}/${FAKE_CA_DIR}/${CERT_NAME}.pem" | 40 cp "${ROOT_FS_DIR}/${TMP_CERT}" "${ROOT_FS_DIR}/${FAKE_CA_DIR}/${CERT_NAME}.pem" |
41 echo "DO NOT MOVE THIS DATA OFF OF THE ROOTFS!" > "${ROOT_FS_DIR}/${FAKE_CA_DIR}
/README" | 41 echo "DO NOT MOVE THIS DATA OFF OF THE ROOTFS!" > "${ROOT_FS_DIR}/${FAKE_CA_DIR}
/README" |
42 sudo chroot "${ROOT_FS_DIR}" ${QEMU} \ | 42 sudo chroot "${ROOT_FS_DIR}" ${QEMU} \ |
43 /usr/local/bin/nsscertutil -d sql:"${FAKE_NSSDB}" -A \ | 43 /usr/local/bin/nsscertutil -d sql:"${FAKE_NSSDB}" -A \ |
44 -n FakeCert -t "C,," -a -i "${FAKE_CA_DIR}/${CERT_NAME}.pem" | 44 -n FakeCert -t "C,," -a -i "${FAKE_CA_DIR}/${CERT_NAME}.pem" |
45 chmod 0644 "${ROOT_FS_DIR}/${FAKE_NSSDB}"/* | 45 chmod 0644 "${ROOT_FS_DIR}/${FAKE_NSSDB}"/* |
46 | 46 |
47 # TODO(cmasone): get rid of this once we're off pam_google for good. | |
48 # Sadly, our fake cert HAS to be first in this file. | |
49 TMPFILE=$(mktemp) | |
50 CERT_FILE="${ROOT_FS_DIR}/etc/login_trust_root.pem" | 47 CERT_FILE="${ROOT_FS_DIR}/etc/login_trust_root.pem" |
51 PERMS=$(stat --printf="%a" "${CERT_FILE}") | 48 mv -f "${ROOT_FS_DIR}/${TMP_CERT}" "${CERT_FILE}" |
52 cat "${ROOT_FS_DIR}/${TMP_CERT}" "${CERT_FILE}" > "${TMPFILE}" | 49 chmod 0644 "${CERT_FILE}" |
53 mv -f "${TMPFILE}" "${CERT_FILE}" | |
54 chmod "${PERMS}" "${CERT_FILE}" | |
55 | 50 |
56 if [ -n "${QEMU}" ] ; then | 51 if [ -n "${QEMU}" ] ; then |
57 rm "${ROOT_FS_DIR}/${QEMU}" | 52 rm "${ROOT_FS_DIR}/${QEMU}" |
58 fi | 53 fi |
59 rm "${ROOT_FS_DIR}/${TMP_KEY}" | 54 rm -f "${ROOT_FS_DIR}/${TMP_KEY}" |
60 rm "${ROOT_FS_DIR}/${TMP_CERT}" | 55 rm -f "${ROOT_FS_DIR}/${TMP_CERT}" |
OLD | NEW |