Add self-signed CA files to system trust store

in the hope that dnf in 9.5 will actually trust them and not fail
osbuild · Jun 7, 2024 · ee1f70e · ee1f70e
1 parent 3860f03
commit ee1f70e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/test/cases/regression-composer-works-behind-satellite-fallback.sh b/test/cases/regression-composer-works-behind-satellite-fallback.sh
@@ -23,6 +23,10 @@ function generate_certificates {
     # Certificate for the client
     sudo openssl req -new -subj "/C=GB/CN=localhost" -sha256 -key client.key -out client.csr
     sudo openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 365 -sha256
+
+    # add the certificate authority to the system trust stores
+    sudo cp ca.crt "/etc/pki/ca-trust/source/anchors/ca-$(uuidgen).crt"
+    sudo update-ca-trust
 }
 
 source /usr/libexec/osbuild-composer-test/set-env-variables.sh

diff --git a/test/cases/regression-composer-works-behind-satellite.sh b/test/cases/regression-composer-works-behind-satellite.sh
@@ -26,6 +26,10 @@ function generate_certificates {
     # Certificate for the client
     sudo openssl req -new -subj "/C=GB/CN=localhost" -sha256 -key client.key -out client.csr
     sudo openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 365 -sha256
+
+    # add the certificate authority to the system trust stores
+    sudo cp ca.crt "/etc/pki/ca-trust/source/anchors/ca-$(uuidgen).crt"
+    sudo update-ca-trust
 }
 
 function cleanup {