Différences entre les versions de « Collabora CODE »

De Linux Server Wiki
Aller à la navigation Aller à la recherche
Ligne 6 : Ligne 6 :
 
</pre>
 
</pre>
  
Génération du certificat
+
Génération du certificat (basé sur https://github.com/CollaboraOnline/Docker-CODE/blob/master/scripts/start-libreoffice.sh)
 
<pre>
 
<pre>
 
openssl genrsa -out /etc/loolwsd/root.key.pem 2048
 
openssl genrsa -out /etc/loolwsd/root.key.pem 2048
Ligne 15 : Ligne 15 :
 
</pre>
 
</pre>
  
Sécurisation
+
Sécurisation du certificat
 
<pre>
 
<pre>
 
chgrp lool /etc/loolwsd/key.pem
 
chgrp lool /etc/loolwsd/key.pem

Version du 12 octobre 2018 à 13:48

apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0C54D189F4BA284D
echo 'deb https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-debian9 ./' >> /etc/apt/sources.list
aptitude update 
aptitude install install loolwsd code-brand

Génération du certificat (basé sur https://github.com/CollaboraOnline/Docker-CODE/blob/master/scripts/start-libreoffice.sh)

openssl genrsa -out /etc/loolwsd/root.key.pem 2048
openssl req -x509 -new -nodes -key /etc/loolwsd/root.key.pem -days 9131 -out /etc/loolwsd/ca-chain.cert.pem -subj "/C=DE/ST=BW/L=Stuttgart/O=Dummy Authority/CN=Dummy Authority"
openssl genrsa -out /etc/loolwsd/key.pem 2048 -key /etc/loolwsd/key.pem
openssl req -key /etc/loolwsd/key.pem -new -sha256 -out /etc/loolwsd/localhost.csr.pem -subj "/C=DE/ST=BW/L=Stuttgart/O=Dummy Authority/CN=localhost"
openssl x509 -req -in /etc/loolwsd/localhost.csr.pem -CA /etc/loolwsd/ca-chain.cert.pem -CAkey /etc/loolwsd/root.key.pem -CAcreateserial -out /etc/loolwsd/cert.pem -days 9131

Sécurisation du certificat

chgrp lool /etc/loolwsd/key.pem
chmod g+r /etc/loolwsd/key.pem

Modification de la configuration (remplacez ADMIN_PASSWORD_HERE !) :

domain=cloud\\\.domain\\\.tld
username=admin
password=ADMIN_PASSWORD_HERE
perl -pi -e "s/localhost<\/host>/${domain}<\/host>/g" /etc/loolwsd/loolwsd.xml
perl -pi -e "s/<username (.*)>.*<\/username>/<username \1>${username}<\/username>/" /etc/loolwsd/loolwsd.xml
perl -pi -e "s/<password (.*)>.*<\/password>/<password \1>${password}<\/password>/" /etc/loolwsd/loolwsd.xml

Relancez le service :

systemctl restart loolwsd