Skip to content
Sign in

Changes

Started by upstream project gerrit-onomondo-eim #3
Started 22 hr ago
Queued 7.3 sec
certificates: fix certificate location, make sure cert/key files are readable

The certificate and key files are placed in the config directory. This is
an unfortunate location, since it causes a lot of trouble when referencing
those files.

The erlang documentation suggests to place so called auxillary files in a
"priv" directory on the same level as the config directory. The path to
the priv directory can then be located using code:priv_dir.

see also: https://www.erlang.org/docs/26/design_principles/applications.html

Let's adopt this mechanism by adding utility functions that allow us to
resolve the file paths to files inside the priv directory. Let's also
automatically check if the referenced file is readable, so that we get
a proper error in the log in case a certificate or key file is missing

Change-Id: Ie09d746a6e28ac6fee3e00dfa32cb01f8a7b947e
Related: SYS#7093
priv/sgp26_gsma_root_ci_cert_nist_symantec.crt src/crypto_utils.erl config/sample_eim_cert_nist.crt priv/sgp26_gsma_root_ci_cert_nist_oiste.crt src/utils.erl config/sys.config config/sample_eim_cert_nist.key config/sample_ssl_cert.crt priv/sgp26_test_root_ci_cert_brainpool.crt priv/sample_ssl_cert.crt priv/sample_eim_cert_brainpool.crt config/sample_ssl_cert.key priv/sample_eim_cert_nist.key src/rest_handler.erl config/sgp26_test_root_ci_cert_nist.crt priv/sgp26_test_root_ci_cert_nist.crt config/sample_eim_cert_brainpool.key priv/sample_ssl_cert.key config/sample_eim_cert_brainpool.crt priv/sample_eim_cert_brainpool.key priv/sample_eim_cert_nist.crt config/sgp26_test_root_ci_cert_brainpool.crt config/sgp26_gsma_root_ci_cert_nist_oiste.crt src/eim_cfg.erl src/onomondo_eim_app.erl config/sgp26_gsma_root_ci_cert_nist_symantec.crt
pmaier@sysmocom.de at