summaryrefslogtreecommitdiffstats
path: root/scripts/ca-existing-pkcs12-create.sh
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-10-20 21:16:52 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-10-20 21:18:08 +0200
commit1adf9a0cac7ff5ddebe30db4c380133ff3718b8a (patch)
treebc82a43cea675b4c76291ba72a903625d0e8f0a3 /scripts/ca-existing-pkcs12-create.sh
parent4a2fdc8bd0acb29c650a103f90fb6a2ba0235659 (diff)
downloadpki-dev-1adf9a0cac7ff5ddebe30db4c380133ff3718b8a.zip
pki-dev-1adf9a0cac7ff5ddebe30db4c380133ff3718b8a.tar.gz
pki-dev-1adf9a0cac7ff5ddebe30db4c380133ff3718b8a.tar.xz
Updated CA scripts.
Diffstat (limited to 'scripts/ca-existing-pkcs12-create.sh')
-rwxr-xr-xscripts/ca-existing-pkcs12-create.sh52
1 files changed, 52 insertions, 0 deletions
diff --git a/scripts/ca-existing-pkcs12-create.sh b/scripts/ca-existing-pkcs12-create.sh
new file mode 100755
index 0000000..c7519e8
--- /dev/null
+++ b/scripts/ca-existing-pkcs12-create.sh
@@ -0,0 +1,52 @@
+#!/bin/sh -x
+
+mkdir -p tmp
+
+cat > tmp/ca-existing.cfg << EOF
+[DEFAULT]
+pki_pin=Secret.123
+
+[CA]
+pki_admin_email=caadmin@example.com
+pki_admin_name=caadmin
+pki_admin_nickname=caadmin
+pki_admin_password=Secret.123
+pki_admin_uid=caadmin
+
+pki_client_database_password=Secret.123
+pki_client_database_purge=False
+pki_client_pkcs12_password=Secret.123
+
+pki_ds_base_dn=dc=ca,dc=pki,dc=example,dc=com
+pki_ds_password=Secret.123
+pki_ds_database=ca
+
+pki_security_domain_name=EXAMPLE
+
+pki_token_password=Secret.123
+
+pki_existing=True
+
+pki_pkcs12_path=tmp/ca-certs.p12
+pki_pkcs12_password=Secret.123
+
+pki_ca_signing_nickname=ca_signing
+pki_ca_signing_csr_path=tmp/ca_signing.csr
+
+pki_ocsp_signing_nickname=ca_ocsp_signing
+pki_ocsp_signing_csr_path=tmp/ca_ocsp_signing.csr
+
+pki_sslserver_nickname=sslserver
+pki_sslserver_csr_path=tmp/sslserver.csr
+
+pki_subsystem_nickname=subsystem
+pki_subsystem_csr_path=tmp/subsystem.csr
+
+pki_audit_signing_nickname=ca_audit_signing
+pki_audit_signing_csr_path=tmp/ca_audit_signing.csr
+
+#pki_serial_number_range_start=6
+#pki_request_number_range_start=1
+EOF
+
+pkispawn -v -f tmp/ca-existing.cfg -s CA