Added CA include script.

1 files changed, 22 insertions, 25 deletions

diff --git a/scripts/ca-configure.sh b/scripts/ca-configure.sh
index bbdf33c..8b67093 100755
--- a/scripts/ca-configure.sh
+++ b/scripts/ca-configure.sh
@@ -1,31 +1,28 @@
 #!/bin/sh -x
 
-PKI_DEV_SRC=`cd .. ; pwd`
+. ./ca-include.sh
 
-INSTANCE_NAME=pki-ca
-PASSWORD=Secret123
-PIN=`grep preop.pin= /var/lib/$INSTANCE_NAME/conf/CS.cfg | awk -F= '{ print $2; }'`
+PIN=`grep preop.pin= $INSTANCE_ROOT/$CA_INSTANCE_NAME/conf/CS.cfg | awk -F= '{ print $2; }'`
 
-REALM=EXAMPLE-COM
-CERTS=$PKI_DEV_SRC/certs/ca
+CERTS=$SRC_DIR/pki-dev/certs/ca
 rm -rf $CERTS
 mkdir -p $CERTS
 
 pkisilent ConfigureCA \
         -cs_hostname $HOSTNAME \
-        -cs_port 9443 \
+        -cs_port $CA_SECURE_PORT \
         -preop_pin $PIN \
         -client_certdb_dir "$CERTS" \
         -client_certdb_pwd "$PASSWORD" \
         -token_name "internal" \
         -domain_name "$REALM" \
-        -subsystem_name "Certificate Authority" \
-        -ldap_host "localhost" \
-        -ldap_port "389" \
-        -base_dn "ou=ca,dc=example,dc=com" \
-        -db_name "example.com-$INSTANCE_NAME" \
-        -bind_dn "cn=Directory Manager" \
-        -bind_password "$PASSWORD" \
+        -subsystem_name "$CA_SUBSYSTEM_NAME" \
+        -ldap_host "$CA_LDAP_HOST" \
+        -ldap_port "$CA_LDAP_PORT" \
+        -base_dn "$CA_LDAP_BASE_DN" \
+        -db_name "$CA_LDAP_DATABASE" \
+        -bind_dn "$CA_LDAP_BIND_DN" \
+        -bind_password "$CA_LDAP_PASSWORD" \
         -remove_data true \
         -key_type rsa \
         -key_size 2048 \
@@ -34,20 +31,20 @@ pkisilent ConfigureCA \
         -save_p12 true \
         -backup_fname "$CERTS/ca-server-certs.p12" \
         -backup_pwd "$PASSWORD" \
-        -ca_sign_cert_subject_name "CN=Certificate Authority,O=$REALM" \
-        -ca_ocsp_cert_subject_name "CN=OCSP Signing Certificate,O=$REALM" \
-        -ca_server_cert_subject_name "CN=$HOSTNAME,O=$REALM" \
-        -ca_subsystem_cert_subject_name "CN=CA Subsystem Certificate,O=$REALM" \
-        -ca_audit_signing_cert_subject_name "CN=CA Audit Signing Certificate,O=$REALM" \
-        -admin_user "caadmin" \
-        -agent_name "caadmin" \
-        -admin_email "caadmin@example.com" \
-        -admin_password "$PASSWORD" \
+        -ca_sign_cert_subject_name "$CA_SIGN_CERT_SUBJECT_NAME" \
+        -ca_ocsp_cert_subject_name "$CA_OCSP_CERT_SUBJECT_NAME" \
+        -ca_server_cert_subject_name "$CA_SERVER_CERT_SUBJECT_NAME" \
+        -ca_subsystem_cert_subject_name "$CA_SUBSYSTEM_CERT_SUBJECT_NAME" \
+        -ca_audit_signing_cert_subject_name "$CA_AUDIT_SIGNING_CERT_SUBJECT_NAME" \
+        -admin_user "$CA_ADMIN_USER" \
+        -agent_name "$CA_ADMIN_NAME" \
+        -admin_email "$CA_ADMIN_EMAIL" \
+        -admin_password "$CA_ADMIN_PASSWORD" \
         -agent_key_size 2048 \
         -agent_key_type rsa \
-        -agent_cert_subject "CN=caadmin,UID=caadmin,E=caadmin@example.com,O=$REALM"
+        -agent_cert_subject "$CA_ADMIN_CERT_SUBJECT"
 
 echo $PASSWORD > "$CERTS/password.txt"
 PKCS12Export -d "$CERTS" -o "$CERTS/ca-client-certs.p12" -p "$CERTS/password.txt" -w "$CERTS/password.txt"
 
-systemctl restart pki-cad@$INSTANCE_NAME.service
+systemctl restart pki-cad@$CA_INSTANCE_NAME.service