From d570915d872fd0c4f186e8a0e68fcddd1f8155d5 Mon Sep 17 00:00:00 2001
From: Matthias Neugebauer <mtneug@shio.solutions>
Date: Wed, 15 May 2024 12:01:00 +0200
Subject: [PATCH] Add function to update certificate authority store on init

When adding custom CA certificates the system and Java stores need to be
updated. This patch adds a function for that that is always called
during init.
---
 rootfs/docker-entrypoint.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/rootfs/docker-entrypoint.sh b/rootfs/docker-entrypoint.sh
index 86b7c48..ee0fe12 100755
--- a/rootfs/docker-entrypoint.sh
+++ b/rootfs/docker-entrypoint.sh
@@ -62,11 +62,19 @@ opencast_file_env() {
   file_env ORG_OPENCASTPROJECT_DB_JDBC_PASS
 }
 
+opencast_main_update_ca() {
+  echo "Run opencast_main_update_ca"
+
+  update-ca-certificates
+  trust extract --overwrite --format=java-cacerts --filter=ca-anchors --purpose=server-auth "$JAVA_HOME/lib/security/cacerts"
+}
+
 opencast_main_init() {
   echo "Run opencast_main_init"
 
   opencast_file_env
   opencast_tz_set
+  opencast_main_update_ca
   opencast_whisper_init
 
   if opencast_helper_customconfig; then