helper->secmod

This commit is contained in:
Christian Grothoff 2021-01-18 11:04:43 +01:00
parent b23f9b78a4
commit b18d0b8aa9
No known key found for this signature in database
GPG Key ID: 939E6BE1E29FC3CC
6 changed files with 13 additions and 20 deletions

View File

@ -1,2 +0,0 @@
AUTHORS
README

View File

@ -1,2 +0,0 @@
usr/include
usr/lib/*/*.so

View File

@ -1,3 +0,0 @@
usr/bin/taler-config
usr/lib/*/*.so.*
usr/share/

View File

@ -13,10 +13,10 @@ case "${1}" in
_EUSERNAME="${RET:-taler-exchange-httpd}" _EUSERNAME="${RET:-taler-exchange-httpd}"
db_get taler-exchange/rsecusername db_get taler-exchange/rsecusername
_RSECUSERNAME="${RET:-taler-exchange-helper-rsa}" _RSECUSERNAME="${RET:-taler-exchange-secmod-rsa}"
db_get taler-exchange/esecusername db_get taler-exchange/esecusername
_ESECUSERNAME="${RET:-taler-exchange-helper-eddsa}" _ESECUSERNAME="${RET:-taler-exchange-secmod-eddsa}"
db_get taler-exchange/wireusername db_get taler-exchange/wireusername
_WIREUSERNAME="${RET:-taler-exchange-wire}" _WIREUSERNAME="${RET:-taler-exchange-wire}"
@ -60,13 +60,13 @@ case "${1}" in
if ! getent passwd ${_RSECUSERNAME} > /dev/null if ! getent passwd ${_RSECUSERNAME} > /dev/null
then then
echo -n "Creating new Taler user ${_RSECUSERNAME}:" echo -n "Creating new Taler user ${_RSECUSERNAME}:"
adduser --quiet --system --ingroup ${_GROUPNAME} --home ${TALER_HOME}/helper-rsa ${_RSECUSERNAME} adduser --quiet --system --ingroup ${_GROUPNAME} --home ${TALER_HOME}/secmod-rsa ${_RSECUSERNAME}
echo " done." echo " done."
fi fi
if ! getent passwd ${_ESECUSERNAME} > /dev/null if ! getent passwd ${_ESECUSERNAME} > /dev/null
then then
echo -n "Creating new Taler user ${_ESECUSERNAME}:" echo -n "Creating new Taler user ${_ESECUSERNAME}:"
adduser --quiet --system --ingroup ${_GROUPNAME} --home ${TALER_HOME}/helper-eddsa ${_ESECUSERNAME} adduser --quiet --system --ingroup ${_GROUPNAME} --home ${TALER_HOME}/secmod-eddsa ${_ESECUSERNAME}
echo " done." echo " done."
fi fi
if ! getent passwd ${_WIREUSERNAME} > /dev/null if ! getent passwd ${_WIREUSERNAME} > /dev/null
@ -104,7 +104,7 @@ EOF
cat > "/etc/systemd/system/taler-exchange-httpd.service" <<EOF cat > "/etc/systemd/system/taler-exchange-httpd.service" <<EOF
[Unit] [Unit]
Description=GNU Taler payment system exchange REST API Description=GNU Taler payment system exchange REST API
Requires=taler-exchange-helper-rsa.service taler-exchange-helper-eddsa.service Requires=taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service
Wants=taler-exchange-wirewatch taler-exchange-aggregator taler-exchange-transfer Wants=taler-exchange-wirewatch taler-exchange-aggregator taler-exchange-transfer
After=postgres.service network.target After=postgres.service network.target
@ -119,7 +119,7 @@ ExecStart=/usr/bin/taler-exchange-httpd -c /etc/taler-exchange.conf
WantedBy=multi-user.target WantedBy=multi-user.target
EOF EOF
cat > "/etc/systemd/system/taler-exchange-helper-rsa.service" <<EOF cat > "/etc/systemd/system/taler-exchange-secmod-rsa.service" <<EOF
[Unit] [Unit]
Description=GNU Taler payment system exchange RSA security module Description=GNU Taler payment system exchange RSA security module
@ -133,7 +133,7 @@ ExecStart=/usr/bin/taler-exchange-secmod-rsa -c /etc/taler-exchange.conf
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target
EOF EOF
cat > "/etc/systemd/system/taler-exchange-helper-eddsa.service" <<EOF cat > "/etc/systemd/system/taler-exchange-secmod-eddsa.service" <<EOF
[Unit] [Unit]
Description=GNU Taler payment system exchange EdDSA security module Description=GNU Taler payment system exchange EdDSA security module

View File

@ -28,10 +28,10 @@ case "${1}" in
_EUSERNAME="${RET:-taler-exchange-httpd}" _EUSERNAME="${RET:-taler-exchange-httpd}"
db_get taler-exchange/rsecusername db_get taler-exchange/rsecusername
_RSECUSERNAME="${RET:-taler-exchange-helper-rsa}" _RSECUSERNAME="${RET:-taler-exchange-secmod-rsa}"
db_get taler-exchange/esecusername db_get taler-exchange/esecusername
_ESECUSERNAME="${RET:-taler-exchange-helper-eddsa}" _ESECUSERNAME="${RET:-taler-exchange-secmod-eddsa}"
db_get taler-exchange/wireusername db_get taler-exchange/wireusername
_WIREUSERNAME="${RET:-taler-exchange-wire}" _WIREUSERNAME="${RET:-taler-exchange-wire}"

View File

@ -9,18 +9,18 @@ _Description: Taler user:
Template: taler-exchange/rsecusername Template: taler-exchange/rsecusername
Type: string Type: string
Default: taler-exchange-helper-rsa Default: taler-exchange-secmod-rsa
_Description: Taler user: _Description: Taler user:
Please choose the user that the taler-exchange-helper-rsa process will run as. Please choose the user that the taler-exchange-secmod-rsa process will run as.
. .
This should be a dedicated account. If the specified account does not This should be a dedicated account. If the specified account does not
already exist, it will automatically be created, with no login shell. already exist, it will automatically be created, with no login shell.
Template: taler-exchange/esecusername Template: taler-exchange/esecusername
Type: string Type: string
Default: taler-exchange-helper-eddsa Default: taler-exchange-secmod-eddsa
_Description: Taler user: _Description: Taler user:
Please choose the user that the taler-exchange-helper-eddsa process will run as. Please choose the user that the taler-exchange-secmod-eddsa process will run as.
. .
This should be a dedicated account. If the specified account does not This should be a dedicated account. If the specified account does not
already exist, it will automatically be created, with no login shell. already exist, it will automatically be created, with no login shell.