diff options
Diffstat (limited to 'scripts/kra-configure.sh')
| -rwxr-xr-x | scripts/kra-configure.sh | 28 |
1 files changed, 15 insertions, 13 deletions
diff --git a/scripts/kra-configure.sh b/scripts/kra-configure.sh index f2c481f..eca98dc 100755 --- a/scripts/kra-configure.sh +++ b/scripts/kra-configure.sh @@ -2,44 +2,46 @@ PKI_DEV_SRC=`cd .. ; pwd` +INSTANCE_NAME=pki-kra PASSWORD=Secret123 -PIN=`grep preop.pin= /var/lib/pki-kra/conf/CS.cfg | awk -F= '{ print $2; }'` +PIN=`grep preop.pin= /var/lib/$INSTANCE_NAME/conf/CS.cfg | awk -F= '{ print $2; }'` +REALM=EXAMPLE-COM CERTS=$PKI_DEV_SRC/certs/kra rm -rf $CERTS mkdir -p $CERTS pkisilent ConfigureDRM \ - -cs_hostname `hostname` \ + -cs_hostname "$HOSTNAME" \ -cs_port 10443 \ -preop_pin "$PIN" \ -client_certdb_dir "$CERTS" \ -client_certdb_pwd "$PASSWORD" \ -token_name "internal" \ - -sd_hostname `hostname` \ + -sd_hostname "$HOSTNAME" \ -sd_admin_port 9443 \ -sd_ssl_port 9443 \ -sd_agent_port 9443 \ -sd_admin_name "caadmin" \ -sd_admin_password "$PASSWORD" \ - -domain_name "Example Domain" \ + -domain_name "$REALM" \ -subsystem_name "Data Recovery Manager" \ -ldap_host "localhost" \ -ldap_port "389" \ -base_dn "ou=kra,dc=example,dc=com" \ - -db_name "example.com-pki-kra" \ + -db_name "example.com-$INSTANCE_NAME" \ -bind_dn "cn=Directory Manager" \ -bind_password "$PASSWORD" \ -remove_data true \ -key_type rsa \ -key_size 2048 \ -signing_algorithm SHA256withRSA \ - -drm_transport_cert_subject_name "CN=DRM Transport Certificate,OU=pki-kra,O=Example Domain" \ - -drm_storage_cert_subject_name "CN=DRM Storage Certificate,OU=pki-kra,O=Example Domain" \ - -drm_server_cert_subject_name "CN=$HOSTNAME,OU=pki-kra,O=Example Domain" \ - -drm_subsystem_cert_subject_name "CN=DRM Subsystem Certificate,OU=pki-kra,O=Example Domain" \ - -drm_audit_signing_cert_subject_name "CN=DRM Audit Signing Certificate,OU=pki-kra,O=Example Domain" \ - -ca_hostname `hostname` \ + -drm_transport_cert_subject_name "CN=DRM Transport Certificate,O=$REALM" \ + -drm_storage_cert_subject_name "CN=DRM Storage Certificate,O=$REALM" \ + -drm_server_cert_subject_name "CN=$HOSTNAME,O=$REALM" \ + -drm_subsystem_cert_subject_name "CN=DRM Subsystem Certificate,O=$REALM" \ + -drm_audit_signing_cert_subject_name "CN=DRM Audit Signing Certificate,O=$REALM" \ + -ca_hostname "$HOSTNAME" \ -ca_port 9180 \ -ca_ssl_port 9443 \ -backup_fname "$CERTS/kra-server-certs.p12" \ @@ -50,9 +52,9 @@ pkisilent ConfigureDRM \ -admin_password "$PASSWORD" \ -agent_key_size 2048 \ -agent_key_type rsa \ - -agent_cert_subject "CN=kraadmin,UID=kraadmin,E=kraadmin@example.com,O=Example Domain" + -agent_cert_subject "CN=kraadmin,UID=kraadmin,E=kraadmin@example.com,O=$REALM" echo $PASSWORD > "$CERTS/password.txt" PKCS12Export -d "$CERTS" -o "$CERTS/kra-client-certs.p12" -p "$CERTS/password.txt" -w "$CERTS/password.txt" -systemctl restart pki-krad@pki-kra.service +systemctl restart pki-krad@$INSTANCE_NAME.service |