kindred/create
1
1
Fork 0
Code Issues 53 Pull Requests Actions Packages Projects 9 Releases 2 Wiki Activity

CI: Fix openssl hang by avoiding pipe to head

Browse Source 
- Use -subject -dates -noout instead of -text -noout | head -20
- Remove --cacert from curl since cert is now in system store
This commit is contained in:
forbes
2026-01-28 09:56:52 -06:00
parent 0d631b5c91
commit 97f6bee3a6
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.gitea/workflows/build.yml
View File

@@ -27,9 +27,9 @@ jobs:
echo "Downloading FreeIPA CA certificate..."
curl -fsSL -o /tmp/ipa-ca.crt https://ipa.kindred.internal/ipa/config/ca.crt
# Verify the certificate is valid
# Verify the certificate is valid (just show subject and dates)
echo "Verifying certificate..."
openssl x509 -in /tmp/ipa-ca.crt -text -noout | head -20
openssl x509 -in /tmp/ipa-ca.crt -subject -dates -noout
# Install to system trust store
sudo cp /tmp/ipa-ca.crt /usr/local/share/ca-certificates/ipa-ca.crt
@@ -40,7 +40,7 @@ jobs:
# Verify SSL connection to Gitea works
echo "Testing SSL connection to Gitea..."
curl -fsSL --cacert /tmp/ipa-ca.crt https://gitea.kindred.internal/api/v1/version
curl -fsSL https://gitea.kindred.internal/api/v1/version
echo ""
echo "SSL certificate setup complete"

6
.gitea/workflows/release.yml
View File

@@ -35,9 +35,9 @@ jobs:
echo "Downloading FreeIPA CA certificate..."
curl -fsSL -o /tmp/ipa-ca.crt https://ipa.kindred.internal/ipa/config/ca.crt
# Verify the certificate is valid
# Verify the certificate is valid (just show subject and dates)
echo "Verifying certificate..."
openssl x509 -in /tmp/ipa-ca.crt -text -noout | head -20
openssl x509 -in /tmp/ipa-ca.crt -subject -dates -noout
# Install to system trust store
sudo cp /tmp/ipa-ca.crt /usr/local/share/ca-certificates/ipa-ca.crt
@@ -48,7 +48,7 @@ jobs:
# Verify SSL connection to Gitea works
echo "Testing SSL connection to Gitea..."
curl -fsSL --cacert /tmp/ipa-ca.crt https://gitea.kindred.internal/api/v1/version
curl -fsSL https://gitea.kindred.internal/api/v1/version
echo ""
echo "SSL certificate setup complete"