1 files changed, 57 insertions, 0 deletions
diff --git a/dogtag-9.0/ca-configure.sh b/dogtag-9.0/ca-configure.sh
new file mode 100755
index 0000000..42ed7d8
--- /dev/null
+++ b/dogtag-9.0/ca-configure.sh
@@ -0,0 +1,57 @@
+#!/bin/sh -x
+
+. ./ca-include.sh
+
+PIN=`grep preop.pin= $INSTANCE_ROOT/$CA_INSTANCE_NAME/conf/CS.cfg | awk -F= '{ print $2; }'`
+NSSDB_PASSWORD=`grep internal= $INSTANCE_ROOT/$CA_INSTANCE_NAME/conf/password.conf | awk -F = '{ print $2; }'`
+
+CERTS=$INSTANCE_ROOT/$CA_INSTANCE_NAME/certs
+rm -rf $CERTS
+mkdir -p $CERTS
+echo $PASSWORD > $CERTS/password.txt
+
+pkisilent ConfigureCA \
+ -cs_hostname $HOSTNAME \
+ -cs_port $CA_SECURE_PORT \
+ -preop_pin $PIN \
+ -client_certdb_dir "$CERTS" \
+ -client_certdb_pwd "$PASSWORD" \
+ -token_name "internal" \
+ -domain_name "$REALM" \
+ -subsystem_name "$CA_SUBSYSTEM_NAME" \
+ -ldap_host "$CA_LDAP_HOST" \
+ -ldap_port "$CA_LDAP_PORT" \
+ -base_dn "$CA_LDAP_BASE_DN" \
+ -db_name "$CA_LDAP_DATABASE" \
+ -bind_dn "$CA_LDAP_BIND_DN" \
+ -bind_password "$CA_LDAP_PASSWORD" \
+ -remove_data true \
+ -key_type rsa \
+ -key_size 2048 \
+ -key_algorithm SHA256withRSA \
+ -signing_signingalgorithm SHA256withRSA \
+ -save_p12 true \
+ -backup_fname "$CERTS/ca-server-certs.p12" \
+ -backup_pwd "$PASSWORD" \
+ -ca_sign_cert_subject_name "$CA_SIGN_CERT_SUBJECT_NAME" \
+ -ca_ocsp_cert_subject_name "$CA_OCSP_CERT_SUBJECT_NAME" \
+ -ca_server_cert_subject_name "$CA_SERVER_CERT_SUBJECT_NAME" \
+ -ca_subsystem_cert_subject_name "$CA_SUBSYSTEM_CERT_SUBJECT_NAME" \
+ -ca_audit_signing_cert_subject_name "$CA_AUDIT_SIGNING_CERT_SUBJECT_NAME" \
+ -admin_user "$CA_ADMIN_USER" \
+ -agent_name "$CA_ADMIN_NAME" \
+ -admin_email "$CA_ADMIN_EMAIL" \
+ -admin_password "$CA_ADMIN_PASSWORD" \
+ -agent_key_size 2048 \
+ -agent_key_type rsa \
+ -agent_cert_subject "$CA_ADMIN_CERT_SUBJECT"
+
+# -external true \
+# -ext_csr_file /tmp/ca_signing.csr
+ 
+echo $PASSWORD > "$CERTS/password.txt"
+PKCS12Export -d "$CERTS" -o "$CERTS/ca-client-certs.p12" -p "$CERTS/password.txt" -w "$CERTS/password.txt"
+
+/sbin/service pki-cad restart $CA_INSTANCE_NAME
+
+#/bin/cp -f /tmp/ca_signing.csr .