diff options
| author | Endi S. Dewata <edewata@redhat.com> | 2017-07-21 18:22:25 +0200 |
|---|---|---|
| committer | Endi S. Dewata <edewata@redhat.com> | 2017-07-21 18:22:25 +0200 |
| commit | 72ccf99e502b2fc8b59f31780ba48134fa8d2759 (patch) | |
| tree | 32115e22aa1c0cf509bb40d98513072c72024004 /dogtag-9.0/ca-configure2.sh | |
| parent | 0517bd5bb3aac6b2469e94ca95449f582b8fee72 (diff) | |
| download | pki-dev-72ccf99e502b2fc8b59f31780ba48134fa8d2759.tar.gz pki-dev-72ccf99e502b2fc8b59f31780ba48134fa8d2759.tar.xz pki-dev-72ccf99e502b2fc8b59f31780ba48134fa8d2759.zip | |
Added Dogtag 9.0 scripts.
Diffstat (limited to 'dogtag-9.0/ca-configure2.sh')
| -rwxr-xr-x | dogtag-9.0/ca-configure2.sh | 48 |
1 files changed, 48 insertions, 0 deletions
diff --git a/dogtag-9.0/ca-configure2.sh b/dogtag-9.0/ca-configure2.sh new file mode 100755 index 0000000..1ecdd6b --- /dev/null +++ b/dogtag-9.0/ca-configure2.sh @@ -0,0 +1,48 @@ +#!/bin/sh -x + +. ./ca-include.sh + +cp ca_signing.crt /tmp +cp external.crt /tmp + +PIN=`grep preop.pin= $INSTANCE_ROOT/$CA_INSTANCE_NAME/conf/CS.cfg | awk -F= '{ print $2; }'` +NSSDB_PASSWORD=`grep internal= $INSTANCE_ROOT/$CA_INSTANCE_NAME/conf/password.conf | awk -F = '{ print $2; }'` + +pkisilent ConfigureCA \ + -cs_hostname $HOSTNAME \ + -cs_port $CA_SECURE_PORT \ + -preop_pin $PIN \ + -client_certdb_dir "$NSSDB_DIR" \ + -client_certdb_pwd "$NSSDB_PASSWORD" \ + -token_name "internal" \ + -domain_name "$REALM" \ + -subsystem_name "$CA_SUBSYSTEM_NAME" \ + -ldap_host "$CA_LDAP_HOST" \ + -ldap_port "$CA_LDAP_PORT" \ + -base_dn "$CA_LDAP_BASE_DN" \ + -db_name "$CA_LDAP_DATABASE" \ + -bind_dn "$CA_LDAP_BIND_DN" \ + -bind_password "$CA_LDAP_PASSWORD" \ + -remove_data true \ + -key_type rsa \ + -key_size 2048 \ + -key_algorithm SHA256withRSA \ + -signing_signingalgorithm SHA256withRSA \ + -save_p12 true \ + -backup_fname "$CERTS/ca-server-certs.p12" \ + -backup_pwd "$PASSWORD" \ + -ca_sign_cert_subject_name "$CA_SIGN_CERT_SUBJECT_NAME" \ + -ca_ocsp_cert_subject_name "$CA_OCSP_CERT_SUBJECT_NAME" \ + -ca_server_cert_subject_name "$CA_SERVER_CERT_SUBJECT_NAME" \ + -ca_subsystem_cert_subject_name "$CA_SUBSYSTEM_CERT_SUBJECT_NAME" \ + -ca_audit_signing_cert_subject_name "$CA_AUDIT_SIGNING_CERT_SUBJECT_NAME" \ + -admin_user "$CA_ADMIN_USER" \ + -agent_name "$CA_ADMIN_NAME" \ + -admin_email "$CA_ADMIN_EMAIL" \ + -admin_password "$CA_ADMIN_PASSWORD" \ + -agent_key_size 2048 \ + -agent_key_type rsa \ + -agent_cert_subject "$CA_ADMIN_CERT_SUBJECT" \ + -external true \ + -ext_ca_cert_file /tmp/ca_signing.crt \ + -ext_ca_cert_chain_file /tmp/external.crt |