httpd.git/httpd-ssl-gencerts, branch add_tests

better error handling in httpd-ssl-gencerts (#1494556)

2017-09-22T14:48:42+00:00

Resolves: rhbz#1494556

Handle edge-cases in gencerts

2017-09-22T14:37:53+00:00

Make sure that we exit with success if the files already exist and
that we exit with failure and a message if only one or the other
is present.

Require sscg 2.2.0 for creating service and CA certificates together

2017-09-21T18:55:16+00:00

Signed-off-by: Stephen Gallagher

use sscg defaults; append CA cert to generated cert

2017-09-21T15:41:20+00:00

document httpd-init.service in httpd-init.service(8)

Generate SSL keys on service start

2017-09-20T19:00:20+00:00

This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher