[SAC] [OSGeo] #2521: Change secure to use dedicated cert and set up script to copy the cert

[OSGeo]

#2521: Change secure to use dedicated cert and set up script to copy the cert
---------------------------+----------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  closed
 Priority:  normal         |   Milestone:  Sysadmin Contract 2021-II
Component:  Systems Admin  |  Resolution:  fixed
 Keywords:                 |
---------------------------+----------------------------------------
Changes (by robe):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 okay looks like a permission issue.

 I can't run under the osgeo7 tech_dev account

 {{{
   /usr/local/bin/copy_ldap_certs_to_secure.sh
 }}}

 Get this
 {{{
 Error: open /var/lib/snapd/hostfs/etc/cron.d/fullchain.pem.new: permission
 denied
 tech_dev at osgeo7:/etc/cron.d$ sudo
 /usr/local/bin/copy_ldap_certs_to_secure.sh
 fullchain.pem.new fullchain.pem.current differ: byte 34, line 2

 }}}

 But if I do


 {{{
  sudo /usr/local/bin/copy_ldap_certs_to_secure.sh
 }}}

 It works.  I'm gong to change the cronjob to do sudo.

 strk feel free to change again if you don't feel that is right.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2521#comment:14>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.