From 4b61e5dafce514f7143e559378ea2fbcc184adef Mon Sep 17 00:00:00 2001
From: William Petit <wpetit@cadoles.com>
Date: Thu, 18 Feb 2021 18:56:45 +0100
Subject: [PATCH] Install LetsEncrypt CA in packaging environment

---
 .../debian/install-letsencrypt-ca             | 23 +++++++++++++++++++
 profiles/debian.conf                          |  3 ++-
 2 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100755 hooks/containerbuild/debian/install-letsencrypt-ca

diff --git a/hooks/containerbuild/debian/install-letsencrypt-ca b/hooks/containerbuild/debian/install-letsencrypt-ca
new file mode 100755
index 0000000..d124bf5
--- /dev/null
+++ b/hooks/containerbuild/debian/install-letsencrypt-ca
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+set -e
+
+cat >> Dockerfile <<EOF
+ENV DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && apt-get install --yes --no-install-recommends openssl ca-certificates
+
+ADD https://letsencrypt.org/certs/isrgrootx1.pem.txt /usr/local/share/ca-certificates/isrgrootx1.pem
+ADD https://letsencrypt.org/certs/isrg-root-x2.pem  /usr/local/share/ca-certificates/isrg-root-x2.pem
+ADD https://letsencrypt.org/certs/trustid-x3-root.pem.txt /usr/local/share/ca-certificates/trustid-x3-root.pem
+ADD https://letsencrypt.org/certs/letsencryptauthorityx3.pem /usr/local/share/ca-certificates/letsencryptauthorityx3.pem 
+
+RUN cd /usr/local/share/ca-certificates \
+ && openssl x509 -in isrgrootx1.pem -inform PEM -out isrgrootx1.crt \
+ && openssl x509 -in trustid-x3-root.pem -inform PEM -out trustid-x3-root.crt \
+ && openssl x509 -in letsencryptauthorityx3.pem -inform PEM -out letsencryptauthorityx3.crt \
+ && openssl x509 -in isrg-root-x2.pem -inform PEM -out isrg-root-x2.crt
+
+RUN update-ca-certificates 
+
+ENV DEBIAN_FRONTEND=
+EOF
diff --git a/profiles/debian.conf b/profiles/debian.conf
index 1bfc15f..5e1f4c7 100644
--- a/profiles/debian.conf
+++ b/profiles/debian.conf
@@ -7,7 +7,8 @@ default_image=debian:stretch
 [containerbuild]
 hooks=
   containerbuild/debian/install-build-essential,
-  containerbuild/debian/install-git
+  containerbuild/debian/install-git,
+  containerbuild/debian/install-letsencrypt-ca
 
 # Configuration de l'étape de pré-construction du paquet
 [prebuild]