|
@@ -204,6 +204,8 @@ case "$1" in
|
204
|
204
|
fi
|
205
|
205
|
fi
|
206
|
206
|
|
|
207
|
+ CERT_ADDED_TO_TRUST="false"
|
|
208
|
+
|
207
|
209
|
if [ ! -f /var/lib/prosody/$JICOFO_AUTH_DOMAIN.crt ]; then
|
208
|
210
|
# prosodyctl takes care for the permissions
|
209
|
211
|
# echo for using all default values
|
|
@@ -220,6 +222,8 @@ case "$1" in
|
220
|
222
|
# store not get re-generated with latest changes
|
221
|
223
|
update-ca-certificates -f
|
222
|
224
|
|
|
225
|
+ CERT_ADDED_TO_TRUST="true"
|
|
226
|
+
|
223
|
227
|
# don't fail on systems with custom config ($PROSODY_HOST_CONFIG is missing)
|
224
|
228
|
if [ -f $PROSODY_HOST_CONFIG ]; then
|
225
|
229
|
# now let's add the ssl cert for the auth. domain (we use # as a sed delimiter cause filepaths are confused with default / delimiter)
|
|
@@ -232,6 +236,11 @@ case "$1" in
|
232
|
236
|
|
233
|
237
|
if [ "$PROSODY_CONFIG_PRESENT" = "false" ]; then
|
234
|
238
|
invoke-rc.d prosody restart || true
|
|
239
|
+
|
|
240
|
+ # In case we had updated the certificates and restarted prosody, let's restart and the bridge if possible
|
|
241
|
+ if [ -d /run/systemd/system ] && [ "$CERT_ADDED_TO_TRUST" = "true" ]; then
|
|
242
|
+ systemctl restart jitsi-videobridge2.service >/dev/null || true
|
|
243
|
+ fi
|
235
|
244
|
fi
|
236
|
245
|
;;
|
237
|
246
|
|