summaryrefslogtreecommitdiffstats
path: root/scripts/vault-init.sh
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-07-20 08:03:44 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-07-20 08:03:44 +0200
commitd57fd66d687211a0fa62ad515872749d2946bb8e (patch)
tree8b1f3233e66da75ad764888aefa6e1ee533cc82d /scripts/vault-init.sh
parentf0f39288d640a0b0a755c49fdc08f1219c386ca7 (diff)
downloadpki-dev-d57fd66d687211a0fa62ad515872749d2946bb8e.tar.gz
pki-dev-d57fd66d687211a0fa62ad515872749d2946bb8e.tar.xz
pki-dev-d57fd66d687211a0fa62ad515872749d2946bb8e.zip
Added vault scripts.
Diffstat (limited to 'scripts/vault-init.sh')
-rwxr-xr-xscripts/vault-init.sh10
1 files changed, 10 insertions, 0 deletions
diff --git a/scripts/vault-init.sh b/scripts/vault-init.sh
new file mode 100755
index 0000000..f6c5b4c
--- /dev/null
+++ b/scripts/vault-init.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+cd ~/.dogtag/pki-tomcat
+
+# export CA admin cert
+openssl pkcs12 -nodes -in ca_admin_cert.p12 -out ca_admin_cert.pem -password file:ca/password.conf
+
+# get transport cert
+certutil -L -d /var/lib/pki/pki-tomcat/alias -n "transportCert cert-pki-tomcat KRA" -a > transport.crt
+certutil -A -d ca/alias -n "KRA Transport Certificte" -i transport.crt -a -t "u,u,u"