summaryrefslogtreecommitdiffstats
path: root/security-tools/src/main/sh/vespa-curl-wrapper
blob: 7c2f31d7719b817b8633b127ba1fbc178bb82dd2 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
#!/usr/bin/env bash
# Copyright 2019 Oath Inc. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.

# Uses vespa-security-env to call curl with paths to credentials.
# This script should be installed in libexec only. It is not public api.

set -e

. $(vespa-security-env)

CURL_PARAMETERS=$1
CONFIGSERVER_URI_WITHOUT_SCHEME=$2

if [ -n "${VESPA_TLS_ENABLED}" ]
then
  CONFIGSERVER_URI="https://${CONFIGSERVER_URI_WITHOUT_SCHEME}"
else
  CONFIGSERVER_URI="http://${CONFIGSERVER_URI_WITHOUT_SCHEME}"
fi

if [ -n "${VESPA_TLS_CA_CERT}" ]
then
  CURL_PARAMETERS="--cacert \"${VESPA_TLS_CA_CERT}\" ${CURL_PARAMETERS}"
fi

if [[ -n "${VESPA_TLS_CERT}" && -n "${VESPA_TLS_PRIVATE_KEY}" ]]
then
  CURL_PARAMETERS="--cert \"${VESPA_TLS_CERT}\" --key \"${VESPA_TLS_PRIVATE_KEY}\" ${CURL_PARAMETERS}"
fi

curl ${CURL_PARAMETERS} "${CONFIGSERVER_URI}"