From 531d9b77b988e2991517c077979056369f3da402 Mon Sep 17 00:00:00 2001
From: Brian Gough <brian.gough@overleaf.com>
Date: Tue, 21 Jan 2020 09:49:41 +0000
Subject: [PATCH] add redislabs ca cert to repository

---
 services/document-updater/Dockerfile       |  1 +
 services/document-updater/install_deps.sh  |  2 +
 services/document-updater/redislabs_ca.pem | 77 ++++++++++++++++++++++
 3 files changed, 80 insertions(+)
 create mode 100644 services/document-updater/install_deps.sh
 create mode 100644 services/document-updater/redislabs_ca.pem

diff --git a/services/document-updater/Dockerfile b/services/document-updater/Dockerfile
index 59f5e61889..2845544ae6 100644
--- a/services/document-updater/Dockerfile
+++ b/services/document-updater/Dockerfile
@@ -17,6 +17,7 @@ FROM node:6.9.5
 COPY --from=app /app /app
 
 WORKDIR /app
+RUN chmod 0755 ./install_deps.sh && ./install_deps.sh
 USER node
 
 CMD ["node", "--expose-gc", "app.js"]
diff --git a/services/document-updater/install_deps.sh b/services/document-updater/install_deps.sh
new file mode 100644
index 0000000000..8016ec6c85
--- /dev/null
+++ b/services/document-updater/install_deps.sh
@@ -0,0 +1,2 @@
+cp redislabs_ca.pem  /usr/local/share/ca-certificates/redislabs_ca.crt
+update-ca-certificates
diff --git a/services/document-updater/redislabs_ca.pem b/services/document-updater/redislabs_ca.pem
new file mode 100644
index 0000000000..a4af612d25
--- /dev/null
+++ b/services/document-updater/redislabs_ca.pem
@@ -0,0 +1,77 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 11859567854091286320 (0xa495a620ecc0b730)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: O=Garantia Data, CN=SSL Certification Authority
+        Validity
+            Not Before: Oct  1 12:14:55 2013 GMT
+            Not After : Sep 29 12:14:55 2023 GMT
+        Subject: O=Garantia Data, CN=SSL Certification Authority
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b6:6a:92:1f:c3:73:35:8f:26:7c:67:1c:b4:3b:
+                    40:bd:13:e0:1e:02:0c:a5:81:28:27:22:b2:b8:86:
+                    6c:0e:99:78:f5:95:36:8e:21:7c:a4:02:e8:9a:f3:
+                    7d:1f:b4:f3:53:5e:0f:a5:5c:59:48:b3:ae:67:7e:
+                    8e:d3:e1:21:8e:1c:f9:65:50:62:6e:4f:29:a3:7a:
+                    0d:3d:62:99:87:71:43:0e:da:a8:ee:63:d8:a5:02:
+                    12:1f:dc:ce:7a:4b:c5:e4:87:a1:3c:65:47:7e:04:
+                    43:01:76:f1:69:77:7a:0d:af:73:97:2d:f0:b8:d4:
+                    dd:ea:33:59:59:37:81:be:da:97:1f:66:48:0d:92:
+                    82:6b:97:e6:51:10:6b:09:7e:fa:b4:a3:b0:14:ad:
+                    7a:66:36:04:3c:0e:a4:03:17:22:b7:44:c8:ff:dc:
+                    56:7f:26:92:f8:bf:04:3b:39:33:91:be:d3:d8:f4:
+                    81:f8:72:0b:34:56:31:0e:c7:9f:bd:6e:d5:ea:25:
+                    47:1c:15:c6:08:b7:4c:c9:fe:fe:f4:da:15:2a:b1:
+                    2a:38:1c:93:ac:ee:01:88:c1:44:f6:87:7b:ba:8b:
+                    c4:73:6b:d5:2a:3f:31:cf:67:3f:2f:b7:c0:77:9b:
+                    17:06:c8:72:75:28:8f:06:e9:e2:77:2d:91:66:e3:
+                    6f:67
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                FD:70:86:D7:2B:C9:D9:96:DD:92:5E:B9:2A:0A:64:82:A3:CD:ED:F0
+            X509v3 Authority Key Identifier: 
+                keyid:FD:70:86:D7:2B:C9:D9:96:DD:92:5E:B9:2A:0A:64:82:A3:CD:ED:F0
+
+            X509v3 Basic Constraints: 
+                CA:TRUE
+    Signature Algorithm: sha1WithRSAEncryption
+         6d:9e:ad:78:70:44:06:bb:f9:93:81:b3:40:7a:5f:9e:c7:c3:
+         27:75:47:89:1f:99:77:2c:d2:bb:5a:95:b3:e9:be:05:0b:4a:
+         20:7e:4c:26:df:dc:46:e1:26:71:c6:ca:f7:42:63:5b:6f:95:
+         f7:cb:8d:d0:3b:1c:9d:0f:08:e9:fe:61:82:c1:03:4a:53:53:
+         f7:72:be:b3:7a:4a:ef:0d:b9:2e:72:b9:b9:ed:f6:66:f5:de:
+         70:c6:62:8d:6b:9e:dd:18:45:fc:4d:fb:c0:cc:dd:f5:c8:56:
+         bd:37:f0:0d:f4:52:53:d7:d8:eb:b5:13:11:49:4f:43:19:b8:
+         52:98:e9:9b:cb:74:8e:bf:d5:c6:e0:9a:0b:8c:94:08:4c:f8:
+         38:4a:c9:5e:92:af:9e:bd:f4:b3:37:ce:a7:88:f3:5e:a9:66:
+         69:51:10:44:d8:90:6a:fd:d6:ae:e4:06:95:c9:bb:f7:6d:1d:
+         a1:b1:83:56:46:bb:ac:3f:3c:2b:18:19:47:04:09:61:0d:60:
+         3e:15:40:f7:7c:37:7d:89:8c:e7:ee:ea:f1:20:a0:40:30:7c:
+         f3:fe:de:81:a9:67:89:b7:7b:00:02:71:63:80:7a:7a:9f:95:
+         bf:9c:41:80:b8:3e:c1:7b:a9:b5:c3:99:16:96:ad:b2:a7:b4:
+         e9:59:de:7d
+-----BEGIN CERTIFICATE-----
+MIIDTzCCAjegAwIBAgIJAKSVpiDswLcwMA0GCSqGSIb3DQEBBQUAMD4xFjAUBgNV
+BAoMDUdhcmFudGlhIERhdGExJDAiBgNVBAMMG1NTTCBDZXJ0aWZpY2F0aW9uIEF1
+dGhvcml0eTAeFw0xMzEwMDExMjE0NTVaFw0yMzA5MjkxMjE0NTVaMD4xFjAUBgNV
+BAoMDUdhcmFudGlhIERhdGExJDAiBgNVBAMMG1NTTCBDZXJ0aWZpY2F0aW9uIEF1
+dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZqkh/DczWP
+JnxnHLQ7QL0T4B4CDKWBKCcisriGbA6ZePWVNo4hfKQC6JrzfR+081NeD6VcWUiz
+rmd+jtPhIY4c+WVQYm5PKaN6DT1imYdxQw7aqO5j2KUCEh/cznpLxeSHoTxlR34E
+QwF28Wl3eg2vc5ct8LjU3eozWVk3gb7alx9mSA2SgmuX5lEQawl++rSjsBStemY2
+BDwOpAMXIrdEyP/cVn8mkvi/BDs5M5G+09j0gfhyCzRWMQ7Hn71u1eolRxwVxgi3
+TMn+/vTaFSqxKjgck6zuAYjBRPaHe7qLxHNr1So/Mc9nPy+3wHebFwbIcnUojwbp
+4nctkWbjb2cCAwEAAaNQME4wHQYDVR0OBBYEFP1whtcrydmW3ZJeuSoKZIKjze3w
+MB8GA1UdIwQYMBaAFP1whtcrydmW3ZJeuSoKZIKjze3wMAwGA1UdEwQFMAMBAf8w
+DQYJKoZIhvcNAQEFBQADggEBAG2erXhwRAa7+ZOBs0B6X57Hwyd1R4kfmXcs0rta
+lbPpvgULSiB+TCbf3EbhJnHGyvdCY1tvlffLjdA7HJ0PCOn+YYLBA0pTU/dyvrN6
+Su8NuS5yubnt9mb13nDGYo1rnt0YRfxN+8DM3fXIVr038A30UlPX2Ou1ExFJT0MZ
+uFKY6ZvLdI6/1cbgmguMlAhM+DhKyV6Sr5699LM3zqeI816pZmlREETYkGr91q7k
+BpXJu/dtHaGxg1ZGu6w/PCsYGUcECWENYD4VQPd8N32JjOfu6vEgoEAwfPP+3oGp
+Z4m3ewACcWOAenqflb+cQYC4PsF7qbXDmRaWrbKntOlZ3n0=
+-----END CERTIFICATE-----