-#!/bin/bash
-#
-# This script is a placeholder for a local certificate authority (CA)
-# to be a recognized certificate authority.
-#
-# This script must be run as root.
-#
-# Works on both CentOS and Ubuntu.
-#
-set -x
-
-# IMPORTANT: use a .crt suffix for update-ca-certificates to work
-#
-AAFCERT=AAF_RootCA.crt
-cat >/tmp/$AAFCERT <<'!EOF'
-----BEGIN CERTIFICATE-----
MIIFPjCCAyagAwIBAgIJAJ6u7cCnzrWdMA0GCSqGSIb3DQEBCwUAMCwxDjAMBgNV
BAsMBU9TQUFGMQ0wCwYDVQQKDARPTkFQMQswCQYDVQQGEwJVUzAeFw0xODA0MDUx
ZVlnhUDO4z9//WKMVzwS9Rh8/kuszrGFI1KQozXCHLrce3YP6RYZfOed79LXaRwX
dYY=
-----END CERTIFICATE-----
-!EOF
-chmod 444 /tmp/$AAFCERT
-if [ -f /etc/redhat-release ]
-then
- mv /tmp/$AAFCERT /etc/pki/ca-trust/source/anchors/aafcacert.pem
- update-ca-trust
-else
- mv /tmp/$AAFCERT /usr/local/share/ca-certificates/$AAFCERT
- update-ca-certificates
-fi