Skip to content
Donald A. Cupp Jr edited this page May 22, 2020 · 15 revisions

How to add a certificate to a build

Your certificates will need to be base64(PEM) encoded and suffixed as either .crt or .pem

You will need to create a folder in /build/packages that contains a certs folder, and within the certs folder, we can make a folder called ca to hold Certificate Authority certs.

 mkdir -p /build/packages/my-certificates/certs/ca

Next create a dependencies file that pulls in ca-bundle

 echo ca-bundle > /build/packages/my-certificates/dependencies

We now need to include our new package in our build

 echo "package my-certificates" >> /build/build.conf

You can drop any CA certificates you want in the /build/packages/my-certificates/certs/ca, and then run build. This should link your cert into all the right places.
Additionally, if you want to specifically trust a webserver without a CA chain, you can create the trusted folder and put your Peer certificates in there.

 mkdir -p /build/packages/my-certificates/certs/trusted