Module: Localhost::System::Linux

Defined in:
lib/localhost/system/linux.rb

Overview

Linux specific system operations.

Constant Summary collapse

ANCHORS_PATH =

This appears to be the standard path for the system trust store on many Linux distributions.

"/etc/ca-certificates/trust-source/anchors/"
UPDATE_CA_TRUST = 
"update-ca-trust"
OPENSUSE_ANCHORS_PATH =

OpenSUSE/SLES use this path for certificate anchors.

"/etc/pki/trust/anchors/"
LOCAL_CERTIFICATES_PATH =

This is an older method for systems that do not use update-ca-trust.

"/usr/local/share/ca-certificates/"
UPDATE_CA_CERTIFICATES = 
"update-ca-certificates"

Class Method Summary collapse

Class Method Details

.install(certificate) ⇒ Object

Install a certificate into the system trust store.



24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
 
# File 'lib/localhost/system/linux.rb', line 24

def self.install(certificate)
	filename = File.basename(certificate)
	command = nil
	
	if File.exist?(ANCHORS_PATH)
		# For systems using `update-ca-trust` (most Linux distributions).
		destination = File.join(ANCHORS_PATH, filename)
		command = UPDATE_CA_TRUST
	elsif File.exist?(OPENSUSE_ANCHORS_PATH)
		# For systems using `update-ca-certificates` (OpenSUSE/SLES).
		destination = File.join(OPENSUSE_ANCHORS_PATH, filename)
		command = UPDATE_CA_CERTIFICATES
	elsif File.exist?(LOCAL_CERTIFICATES_PATH)
		# For systems using `update-ca-certificates`.
		destination = File.join(LOCAL_CERTIFICATES_PATH, filename)
		command = UPDATE_CA_CERTIFICATES
	else
		raise "No known system trust store found. Please install the certificate manually."
	end
	
	success = system("sudo", "cp", certificate, destination)
	success &= system("sudo", command)
	
	if success
		$stderr.puts "Installed certificate to #{destination}"
		
		return true
	else
		raise "Failed to install certificate: #{certificate}"
	end
end