Move default location for client certificate database

[pki-bot]

This issue was migrated from Pagure Issue #398. Originally filed by edewata (@edewata) on 2012-11-03 04:10:26:

• Closed as Fixed
• Assigned to mharmsen (@mharmsen)

---

Currently the client certificate database will be created in /tmp by default. If there's a problem or a mistake when configuring the security of the database, it could be left exposed to other users.

It would be better to create the database in the home directory of the user executing pkispawn, for example ~/.pki/certs/. That way the database is automatically protected by the home directory.

[pki-bot]

Comment from mharmsen (@mharmsen) at 2012-11-09 22:01:01

Committed to 'master':

• cfcd015

[pki-bot]

Comment from mharmsen (@mharmsen) at 2012-11-09 23:01:10

Per request, made the following code changes to 'pki/base/silent/templates/pki_silent.template':

diff --git a/base/silent/templates/pki_silent.template b/base/silent/templates/p
index 27e4ae7..10b95ce 100755
--- a/base/silent/templates/pki_silent.template
+++ b/base/silent/templates/pki_silent.template
@@ -54,6 +54,10 @@ if   [ "${MY_UID}"  != "${ROOTUID}" ] &&
        exit 255
 fi
 
+if  [ -z "${HOME}" ]; then
+       printf "ERROR:  The 'HOME' environment variable must be set!\n"
+       exit 255
+fi
 
 
 ##############################################################################
@@ -78,7 +82,7 @@ fi
 
 ##  PKI Silent Security Database Variables
 ##  (e. g. - PKI Silent "browser" database)
-pki_silent_security_database_repository="/tmp"
+pki_silent_security_database_repository="${HOME}/.pki/certs"
 pki_silent_security_database_password=
 
 ##  PKI Security Domain Variables

[pki-bot]

Comment from mharmsen (@mharmsen) at 2012-11-09 23:03:26

Committed to 'master':

• af58413

[pki-bot]

Comment from mharmsen (@mharmsen) at 2012-11-10 01:24:26

Per request, removed 'pki/base/silent/templates/subca_silent.template'.

Committed to 'master':

• 6a1cf64

[pki-bot]

Comment from edewata (@edewata) at 2017-02-27 14:10:56

Metadata Update from @edewata:

• Issue assigned to mharmsen
• Issue set to the milestone: 10.0.0-0.X.rc1