From 0f807b611bbe855e702df5ede8beff21b02829ee Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?G=C3=A9rald=20Schwartzmann?= <gschwartzmann@cadoles.com>
Date: Tue, 9 Oct 2018 16:09:29 +0200
Subject: [PATCH] Change rights for use certificates ref #25493

* use utils.sh script to copy certificates and owner in posttemplate
* change vnc_proxy_cert and vnc_procy_key PATH in conf file
---
 posttemplate/02-nebula-novnc | 15 +++++++++++++++
 tmpl/sunstone-server.conf    |  4 ++--
 2 files changed, 17 insertions(+), 2 deletions(-)
 create mode 100755 posttemplate/02-nebula-novnc

diff --git a/posttemplate/02-nebula-novnc b/posttemplate/02-nebula-novnc
new file mode 100755
index 0000000..8e47441
--- /dev/null
+++ b/posttemplate/02-nebula-novnc
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+###########
+## novnc ##
+###########
+
+. /usr/lib/eole/utils.sh
+
+# Install ssl files
+user=$(systemctl -p Group show --value opennebula-novnc)
+group=$(systemctl -p User show --value opennebula-novnc)
+novnc_conf_dir="/etc/one"
+InstallSSLFiles novnc $user $group ${novnc_conf_dir}/ssl root
+
+exit 0
diff --git a/tmpl/sunstone-server.conf b/tmpl/sunstone-server.conf
index 5302a49..fc7da0f 100644
--- a/tmpl/sunstone-server.conf
+++ b/tmpl/sunstone-server.conf
@@ -117,8 +117,8 @@
 #
 :vnc_proxy_port: %%vnc_proxy_port_sunstone
 :vnc_proxy_support_wss: yes
-:vnc_proxy_cert: %%server_cert
-:vnc_proxy_key: %%server_key
+:vnc_proxy_cert: /etc/one/ssl/certs/novnc.crt
+:vnc_proxy_key: /etc/one/ssl/private/novnc.key
 :vnc_proxy_ipv6: false
 :vnc_request_password: false