Skip to content

Instantly share code, notes, and snippets.

@callmeradical

callmeradical/user_data

Last active August 29, 2015 14:20
Show Gist options
  • Save callmeradical/3248b5865bc97b238f2a to your computer and use it in GitHub Desktop.
Save callmeradical/3248b5865bc97b238f2a to your computer and use it in GitHub Desktop.
Download ZIP
test_kitchen_user_data
Raw
user_data
#!/bin/bash
# download crts
wget http://url-here/certs/ca-bundle.crt -O /etc/pki/tls/certs/ca-bundle.crt
wget http://url-here/certs/ca-bundle.trust.crt -O /etc/pki/tls/certs/ca-bundle.trust.crt
## for chef
mkdir -p /opt/chef/embedded/ssl/certs
mkdir -p /opt/chef/embedded/lib/ruby/site_ruby/1.9.1/rubygems/ssl_certs
ln -s /etc/pki/tls/certs/ca-bundle.crt /opt/chef/embedded/ssl/certs/ca-bundle.crt
ln -s /etc/pki/tls/certs/ca-bundle.trust.crt /opt/chef/embedded/ssl/certs/ca-bundle.trust.crt
ln -s /etc/pki/tls/certs/ca-bundle.crt /opt/chef/embedded/lib/ruby/site_ruby/1.9.1/rubygems/ssl_certs/cert.pem
ln -s /etc/pki/tls/certs/ca-bundle.crt /opt/chef/embedded/ssl/cert.pem
ENV_FILE=/etc/environment
cat << EOF > $ENV_FILE
CURL_CA_BUNDLE=/etc/pki/tls/certs/ca-bundle.crt
EOF
@ryno75
Copy link

ryno75 commented May 8, 2015

I'd maybe change line's 12-15 to just this:
echo 'CURL_CA_BUNDLE=/etc/pki/tls/certs/ca-bundle.crt' > /etc/profile.d/ssl_crt.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment