Skip to content

Commit 5c49c9f

Browse files
committed
merge trust-root-ca into import-additional-cas
1 parent d285ba8 commit 5c49c9f

1 file changed

Lines changed: 4 additions & 6 deletions

File tree

image/scanner/scripts/import-additional-cas

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,10 @@ copy_existing /etc/pki/injected-ca-trust
2626
# Only copy ca.pem — the mount also contains server cert and key which
2727
# should not be added as trusted CA anchors.
2828
CA_PATH="/run/secrets/stackrox.io/certs/ca.pem"
29-
if [ -f "$CA_PATH" ]; then
30-
echo "Copying StackRox root CA from '$CA_PATH'"
31-
cp -v -L "$CA_PATH" /etc/pki/ca-trust/source/anchors/
32-
else
33-
echo "No StackRox root CA found at $CA_PATH"
34-
fi
29+
echo "Copying StackRox root CA from '${CA_PATH}'"
30+
31+
# For RHEL
32+
cp "${CA_PATH}" /etc/pki/ca-trust/source/anchors/root-ca.pem
3533

3634
echo "Updating CA trust"
3735
# Though /etc/pki/ca-trust/extracted is the default output, update-ca-trust

0 commit comments

Comments
 (0)