Add test for updated CA bundle

Signed-off-by: Morris Jobke <hey@morrisjobke.de>
This commit is contained in:
Morris Jobke 2019-02-25 13:49:03 +01:00
parent 36c750ae1e
commit 2bbef58153
No known key found for this signature in database
GPG Key ID: FE03C3A163FEDE68
2 changed files with 24 additions and 0 deletions

View File

@ -8,6 +8,8 @@ php ./build/translation-checker.php
RESULT=$(($RESULT+$?))
php ./build/htaccess-checker.php
RESULT=$(($RESULT+$?))
bash ./build/ca-bundle-checker.sh
RESULT=$(($RESULT+$?))
for app in $(find "apps/" -mindepth 1 -maxdepth 1 -type d -exec basename {} \;); do

22
build/ca-bundle-checker.sh Executable file
View File

@ -0,0 +1,22 @@
#!/usr/bin/env bash
echo
if [[ -n ${DRONE_BRANCH} && ! ${DRONE_BRANCH} =~ version\/noid\/.+ ]]; then
echo "Skip CA bundle check"
exit 0
fi
echo "Fetching latest ca-bundle.crt ..."
curl -o resources/config/ca-bundle.crt https://curl.haxx.se/ca/cacert.pem
echo
outdated=$(git diff --name-only | grep "resources/config/ca-bundle.crt")
if [ "${outdated}" = "resources/config/ca-bundle.crt" ]; then
echo "CA bundle is not up to date."
echo "Please run: bash build/ca-bundle-checker.sh"
echo "And commit the result"
exit 1
fi
echo "CA bundle is up to date."
exit 0