From cd1ab0aaa0f2882fb67bd30e7955a77e5116ae2b Mon Sep 17 00:00:00 2001 From: Endi Sukma Dewata Date: Fri, 13 Apr 2012 00:49:41 -0500 Subject: Added CA include script. --- scripts/ca-include.sh | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100755 scripts/ca-include.sh (limited to 'scripts/ca-include.sh') diff --git a/scripts/ca-include.sh b/scripts/ca-include.sh new file mode 100755 index 0000000..20e2c67 --- /dev/null +++ b/scripts/ca-include.sh @@ -0,0 +1,39 @@ +#!/bin/sh -x + +SRC_DIR="`cd ../.. ; pwd`" + +DOMAIN="example.com" +REALM="EXAMPLE-COM" +PASSWORD="Secret123" + +INSTANCE_ROOT="/var/lib" +INSTANCE_USER="pkiuser" +INSTANCE_GROUP="pkiuser" + +CA_INSTANCE_NAME="pki-ca" + +CA_SUBSYSTEM_TYPE="ca" +CA_SUBSYSTEM_NAME="Certificate Authority" + +CA_SECURE_PORT="9443" +CA_UNSECURE_PORT="9180" +CA_TOMCAT_SERVER_PORT="9701" + +CA_LDAP_HOST="$HOSTNAME" +CA_LDAP_PORT="389" +CA_LDAP_DATABASE="$DOMAIN-$INSTANCE_NAME" +CA_LDAP_BASE_DN="ou=ca,dc=example,dc=com" +CA_LDAP_BIND_DN="cn=Directory Manager" +CA_LDAP_PASSWORD="$PASSWORD" + +CA_SIGN_CERT_SUBJECT_NAME="CN=$CA_SUBSYSTEM_NAME,O=$REALM" +CA_OCSP_CERT_SUBJECT_NAME="CN=OCSP Signing Certificate,O=$REALM" +CA_SERVER_CERT_SUBJECT_NAME="CN=$HOSTNAME,O=$REALM" +CA_SUBSYSTEM_CERT_SUBJECT_NAME="CN=CA Subsystem Certificate,O=$REALM" +CA_AUDIT_SIGNING_CERT_SUBJECT_NAME="CN=CA Audit Signing Certificate,O=$REALM" + +CA_ADMIN_USER="caadmin" +CA_ADMIN_NAME="$CA_ADMIN_USER" +CA_ADMIN_EMAIL="$CA_ADMIN_USER@$DOMAIN" +CA_ADMIN_PASSWORD="$PASSWORD" +CA_ADMIN_CERT_SUBJECT="CN=$CA_ADMIN_NAME,UID=$CA_ADMIN_USER,E=$CA_ADMIN_EMAIL,O=$REALM" -- cgit