From 6fd3620df6ebc3d845f3b729e01f69eabcb5a166 Mon Sep 17 00:00:00 2001 From: Marri Devender Rao Date: Wed, 13 Mar 2019 08:26:46 -0500 Subject: Add certificate manager instance for bmcweb Added bitbake recipe to instantiate phoshor-certificate-manager service for bmcweb certificates. Caters for installing/replacing of bmcweb certificates. Specifying instance arguments through env file Tested: 1) Verified phosphor-certificate-manger instance for bmcweb is running 2) Verified Installing, Replacing of certificates using Redfish (From meta-phosphor rev: b0e77acb579523dfa706a545c86b1c2469692adc) Change-Id: Ifb4c8ac7e34f57a652f72eff1a0ef568a6348124 Signed-off-by: Marri Devender Rao Signed-off-by: Brad Bishop --- .../certificate/phosphor-bmcweb-cert-config.bb | 28 ++++++++++++++++++++++ .../certificate/phosphor-bmcweb-cert-config/env | 12 ++++++++++ 2 files changed, 40 insertions(+) create mode 100644 meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config.bb create mode 100644 meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config/env (limited to 'meta-phosphor/recipes-phosphor/certificate') diff --git a/meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config.bb b/meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config.bb new file mode 100644 index 000000000..c0cea9cb8 --- /dev/null +++ b/meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config.bb @@ -0,0 +1,28 @@ +SUMMARY = "Phosphor certificate manager configuration for a bmcweb service" + +PR = "r1" + +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://${PHOSPHORBASE}/LICENSE;md5=19407077e42b1ba3d653da313f1f5b4e" + +RDEPENDS_${PN} = "phosphor-certificate-manager" + +inherit allarch + +SRC_URI = "file://env" + +do_install() { + install -D ${WORKDIR}/env ${D}/${sysconfdir}/default/obmc/cert/bmcweb +} + +pkg_postinst_${PN}() { + LINK="$D$systemd_system_unitdir/multi-user.target.wants/phosphor-certificate-manager@bmcweb.service" + TARGET="../phosphor-certificate-manager@.service" + mkdir -p $D$systemd_system_unitdir/multi-user.target.wants + ln -s $TARGET $LINK +} + +pkg_prerm_${PN}() { + LINK="$D$systemd_system_unitdir/multi-user.target.wants/phosphor-certificate-manager@bmcweb.service" + rm $LINK +} diff --git a/meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config/env b/meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config/env new file mode 100644 index 000000000..af4899a30 --- /dev/null +++ b/meta-phosphor/recipes-phosphor/certificate/phosphor-bmcweb-cert-config/env @@ -0,0 +1,12 @@ +#D-Bus object path +#example: /xyz/openbmc_project/certs/server/https +ENDPOINT=https + +#Path for the certificate file +CERTPATH=/etc/ssl/certs/https/server.pem + +#Units to restart +UNIT=bmcweb.service + +#Type of the service client/server +TYPE=server -- cgit v1.2.3