Skip to content

Commit faf70da

Browse files
committed
feat: add allow_duplicate_certs config
1 parent 3b88110 commit faf70da

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

  • openvoxserver/container-entrypoint.d

openvoxserver/container-entrypoint.d/90-ca.sh

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,16 @@ else
4141
puppet config set --section server ca_ttl "${CA_TTL}"
4242
puppet config set --section server ca_server "${CA_HOSTNAME}"
4343
puppet config set --section server ca_port "${CA_PORT}"
44+
ca_allow_duplicate_certs="${CA_ALLOW_DUPLICATE_CERTS:-false}"
45+
case "${ca_allow_duplicate_certs}" in
46+
true|false)
47+
puppet config set --section server allow_duplicate_certs "${ca_allow_duplicate_certs}"
48+
;;
49+
*)
50+
echo "Error: CA_ALLOW_DUPLICATE_CERTS must be true or false"
51+
exit 99
52+
;;
53+
esac
4454
hocon -f /etc/puppetlabs/puppetserver/conf.d/ca.conf \
4555
set certificate-authority.allow-subject-alt-names "${CA_ALLOW_SUBJECT_ALT_NAMES}"
4656

0 commit comments

Comments
 (0)