summaryrefslogtreecommitdiffstats
path: root/scripts/kra-standalone-step2.sh
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-09-14 16:17:43 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-09-14 16:17:43 +0200
commit73d0412f24934d5aa211693f5864daaef20db31f (patch)
tree685855b8a829c5d4735074cafc0d2b9c7ec6a7dc /scripts/kra-standalone-step2.sh
parent931c891fffd8811ac229728ae8132d72132f20f7 (diff)
downloadpki-dev-73d0412f24934d5aa211693f5864daaef20db31f.tar.gz
pki-dev-73d0412f24934d5aa211693f5864daaef20db31f.tar.xz
pki-dev-73d0412f24934d5aa211693f5864daaef20db31f.zip
Updated KRA scripts.
Diffstat (limited to 'scripts/kra-standalone-step2.sh')
-rwxr-xr-xscripts/kra-standalone-step2.sh22
1 files changed, 14 insertions, 8 deletions
diff --git a/scripts/kra-standalone-step2.sh b/scripts/kra-standalone-step2.sh
index f20d8b1..2264d5d 100755
--- a/scripts/kra-standalone-step2.sh
+++ b/scripts/kra-standalone-step2.sh
@@ -2,9 +2,6 @@
mkdir -p tmp
-# TODO: should not be required
-# cp tmp/ca_signing.crt tmp/cert_chain.p7b
-
cat > tmp/kra-standalone-step2.cfg << EOF
[DEFAULT]
pki_pin=Secret.123
@@ -33,21 +30,30 @@ pki_token_password=Secret.123
pki_standalone=True
pki_external_step_two=True
+#pki_cert_chain_nickname=ca_signing
+pki_cert_chain_nickname=Root CA Signing Certificate - ROOT
+#pki_external_ca_cert_chain_path=$PWD/tmp/cert_chain.p7b
+pki_external_ca_cert_path=$PWD/tmp/ca_signing.crt
+
pki_storage_nickname=kra_storage
pki_transport_nickname=kra_transport
pki_audit_signing_nickname=kra_audit_signing
-pki_ssl_server_nickname=sslserver
+pki_sslserver_nickname=sslserver
pki_subsystem_nickname=subsystem
-pki_cert_chain_nickname=ca_signing
-#pki_external_ca_cert_chain_path=$PWD/tmp/cert_chain.p7b
-pki_external_ca_cert_path=$PWD/tmp/ca_signing.crt
pki_external_admin_cert_path=$PWD/tmp/kra_admin.crt
pki_external_storage_cert_path=$PWD/tmp/kra_storage.crt
pki_external_transport_cert_path=$PWD/tmp/kra_transport.crt
pki_external_audit_signing_cert_path=$PWD/tmp/kra_audit_signing.crt
pki_external_sslserver_cert_path=$PWD/tmp/sslserver.crt
pki_external_subsystem_cert_path=$PWD/tmp/subsystem.crt
+
+pki_admin_cert_path=$PWD/tmp/kra_admin.crt
+pki_storage_cert_path=$PWD/tmp/kra_storage.crt
+pki_transport_cert_path=$PWD/tmp/kra_transport.crt
+pki_audit_signing_cert_path=$PWD/tmp/kra_audit_signing.crt
+pki_sslserver_cert_path=$PWD/tmp/sslserver.crt
+pki_subsystem_cert_path=$PWD/tmp/subsystem.crt
EOF
-pkispawn -v -f tmp/kra-standalone-step2.cfg -s KRA
+pkispawn -f tmp/kra-standalone-step2.cfg -s KRA -v