From 2e61e2dca992c3a556edc73b574726ba54e4f8ef Mon Sep 17 00:00:00 2001
From: Roland Gruber <post@rolandgruber.de>
Date: Thu, 28 May 2020 20:25:39 +0200
Subject: [PATCH] #96 added option to disable certificate check

---
 lam-packaging/docker/.env     | 3 +++
 lam-packaging/docker/start.sh | 5 +++++
 2 files changed, 8 insertions(+)

diff --git a/lam-packaging/docker/.env b/lam-packaging/docker/.env
index 690f5a65..c68028ae 100644
--- a/lam-packaging/docker/.env
+++ b/lam-packaging/docker/.env
@@ -22,6 +22,9 @@ LAM_LANG=en_US
 # LAM configuration master password and password for server profile "lam"
 LAM_PASSWORD=lam
 
+# deactivate TLS certificate checks, activate for development only
+LAM_DISABLE_TLS_CHECK=false
+
 #
 # docker-compose only, LDAP server setup
 #
diff --git a/lam-packaging/docker/start.sh b/lam-packaging/docker/start.sh
index 82aafb97..0f563daa 100755
--- a/lam-packaging/docker/start.sh
+++ b/lam-packaging/docker/start.sh
@@ -23,6 +23,11 @@
 set -eu # unset variables are errors & non-zero return values exit the whole script
 [ "$DEBUG" ] && set -x
 
+if [ "$LAM_DISABLE_TLS_CHECK" == "true" ]; then
+  ln -s /etc/ldap/ldap.conf /etc/ldap.conf
+  echo "TLS_REQCERT never" >> /etc/ldap/ldap.conf
+fi
+
 LAM_SKIP_PRECONFIGURE="${LAM_SKIP_PRECONFIGURE:-false}"
 if [ "$LAM_SKIP_PRECONFIGURE" != "true" ]; then