webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

IPsec: Add CA certificate in Apple profile

Browse Source 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2020-05-28 17:18:52 +00:00
parent 9326f51c24
commit db33a1220a
1 changed files with 30 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
html/cgi-bin/vpnmain.cgi
View File

@@ -1246,13 +1246,23 @@ END
my $uuid1 = $uuid->create_str();
my $uuid2 = $uuid->create_str();
my $ca = "";
my $ca_uuid = $uuid->create_str();
my $cert = "";
my $cert_uuid = $uuid->create_str();
# Read and encode certificate
# Read and encode the CA & certificate
if ($confighash{$key}[4] eq "cert") {
my $ca_path = "${General::swroot}/ca/cacert.pem";
my $cert_path = "${General::swroot}/certs/$confighash{$key}[1].p12";
# Read the CA and encode it into Base64
open(CA, "<${ca_path}");
local($/) = undef; # slurp
$ca = MIME::Base64::encode_base64(<CA>);
close(CA);
# Read certificate and encode it into Base64
open(CERT, "<${cert_path}");
local($/) = undef; # slurp
@@ -1465,6 +1475,25 @@ END
print " </data>\n";
print " </dict>\n";
print " <dict>\n";
print " <key>PayloadIdentifier</key>\n";
print " <string>org.example.ca</string>\n";
print " <key>PayloadUUID</key>\n";
print " <string>${ca_uuid}</string>\n";
print " <key>PayloadType</key>\n";
print " <string>com.apple.security.root</string>\n";
print " <key>PayloadVersion</key>\n";
print " <integer>1</integer>\n";
print " <key>PayloadContent</key>\n";
print " <data>\n";
foreach (split /\n/,${ca}) {
print " $_\n";
}
print " </data>\n";
print " </dict>\n";
}
print " </array>\n";