Merge pull request #1 from misli/product-id-certs

Install new product id certificates during upgrade
upgrades-migrations · Oct 6, 2014 · 7b9ec3b · 7b9ec3b
2 parents 78b28d8 + cc51573
commit 7b9ec3b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/85system-upgrade-redhat/do-upgrade.sh b/85system-upgrade-redhat/do-upgrade.sh
@@ -27,6 +27,12 @@ do_upgrade() {
     $UPGRADEBIN --root=/sysroot $args
     rv=$?
 
+    # backup old product id certificates
+    chroot $NEWROOT /bin/sh -c 'mkdir /etc/pki/product_old; mv -f /etc/pki/product/*.pem /etc/pki/product_old/'
+
+    # install new product id certificates
+    chroot $NEWROOT /bin/sh -c 'mv -f /system-upgrade/*.pem /etc/pki/product/'
+
     # restore things twiddled by workarounds above. TODO: remove!
     if [ -f /sys/fs/selinux/enforce ]; then
         echo $enforce > /sys/fs/selinux/enforce