Add systemd configuration for ocsp service.

Change-Id: Id7ceda142619d38e8df08349fac4a1590ef55ef2

diff --git a/packaging/key-manager.spec b/packaging/key-manager.spec
index 3d95137..4c6109f 100755 (executable)
--- a/packaging/key-manager.spec
+++ b/packaging/key-manager.spec
@@ -88,7 +88,7 @@ ln -s ../central-key-manager.service %{buildroot}/usr/lib/systemd/system/multi-u
 ln -s ../central-key-manager-echo.socket %{buildroot}/usr/lib/systemd/system/sockets.target.wants/central-key-manager-echo.socket
 ln -s ../central-key-manager-api-control.socket %{buildroot}/usr/lib/systemd/system/sockets.target.wants/central-key-manager-api-control.socket
 ln -s ../central-key-manager-api-storage.socket %{buildroot}/usr/lib/systemd/system/sockets.target.wants/central-key-manager-api-storage.socket
-
+ln -s ../central-key-manager-api-ocsp.socket %{buildroot}/usr/lib/systemd/system/sockets.target.wants/central-key-manager-api-ocsp.socket
 
 %clean
 rm -rf %{buildroot}
@@ -140,6 +140,8 @@ fi
 %attr(-,root,root) /usr/lib/systemd/system/central-key-manager-api-control.socket
 %attr(-,root,root) /usr/lib/systemd/system/sockets.target.wants/central-key-manager-api-storage.socket
 %attr(-,root,root) /usr/lib/systemd/system/central-key-manager-api-storage.socket
+%attr(-,root,root) /usr/lib/systemd/system/sockets.target.wants/central-key-manager-api-ocsp.socket
+%attr(-,root,root) /usr/lib/systemd/system/central-key-manager-api-ocsp.socket
 %{_datadir}/license/%{name}
 
 %files -n key-manager-devel

diff --git a/systemd/CMakeLists.txt b/systemd/CMakeLists.txt
index 37a025c..a0b8851 100644 (file)
--- a/systemd/CMakeLists.txt
+++ b/systemd/CMakeLists.txt
@@ -3,6 +3,7 @@ INSTALL(FILES
     ${CMAKE_SOURCE_DIR}/systemd/central-key-manager.target
     ${CMAKE_SOURCE_DIR}/systemd/central-key-manager-api-control.socket
     ${CMAKE_SOURCE_DIR}/systemd/central-key-manager-api-storage.socket
+    ${CMAKE_SOURCE_DIR}/systemd/central-key-manager-api-ocsp.socket
     ${CMAKE_SOURCE_DIR}/systemd/central-key-manager-echo.socket
     DESTINATION
     /usr/lib/systemd/system

diff --git a/systemd/central-key-manager-api-ocsp.socket b/systemd/central-key-manager-api-ocsp.socket
new file mode 100644 (file)
index 0000000..1d78a19
--- /dev/null
+++ b/systemd/central-key-manager-api-ocsp.socket
@@ -0,0 +1,14 @@
+[Socket]
+ListenStream=/tmp/.central-key-manager-api-ocsp.sock
+SockMode=0777
+SmackLabelIPIn=ckm::api-ocsp
+SmackLabelIPOut=@
+
+Service=central-key-manager.service
+
+[Unit]
+Wants=central-key-manager.target
+Before=central-key-manager.target
+
+[Install]
+WantedBy=sockets.target