From 003fff5dc1cc94bd8da0fd032e353ddafd0f233a Mon Sep 17 00:00:00 2001
From: Michal Nasiadka <mnasiadka@gmail.com>
Date: Mon, 6 Mar 2023 18:27:46 +0100
Subject: https: remove dhparams.pem before running gencerts

On EL9 the file exists and script errors with wrong
permissions to it.

Closes-Bug: #2011716
Change-Id: Ib32baa3208e6bfc5520ff8537193c9a4d6cbada7
(cherry picked from commit 12d431e3994023ce735a2352554a99a5cc9431c9)
---
 docker/base/httpd_setup.sh | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'docker')

diff --git a/docker/base/httpd_setup.sh b/docker/base/httpd_setup.sh
index 3dbf84853..5232f4ed1 100644
--- a/docker/base/httpd_setup.sh
+++ b/docker/base/httpd_setup.sh
@@ -24,7 +24,9 @@ if [[ "$(whoami)" == 'root' ]]; then
     # on startup:
     #   SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty
     # Work around this by generating certificates manually.
+    # NOTE(mnasiadka): in EL9 upgrade jobs gencerts is failing on wrong permissions to dhparams.pem
     if [[ "${KOLLA_BASE_DISTRO}" =~ centos|rocky ]] && [[ ! -e /etc/pki/tls/certs/localhost.crt ]]; then
+        rm -f /tmp/dhparams.pem
         /usr/libexec/httpd-ssl-gencerts
     fi
 fi
-- 
cgit v1.2.3