From 78fcfec59faee408142ed75e61025ccab0c72acc Mon Sep 17 00:00:00 2001
From: "Endi S. Dewata" <edewata@redhat.com>
Date: Tue, 25 Jul 2017 06:03:36 +0200
Subject: Updated standalone OCSP scripts.

---
 scripts/ocsp-standalone-step1.sh | 45 ++++++++++++++++++++++++++++++++++------
 1 file changed, 39 insertions(+), 6 deletions(-)

(limited to 'scripts/ocsp-standalone-step1.sh')

diff --git a/scripts/ocsp-standalone-step1.sh b/scripts/ocsp-standalone-step1.sh
index 0d14be4..7cd161e 100755
--- a/scripts/ocsp-standalone-step1.sh
+++ b/scripts/ocsp-standalone-step1.sh
@@ -1,9 +1,42 @@
 #!/bin/sh -x
 
-pkispawn -v -f ocsp-standalone-step1.cfg -s OCSP
+mkdir -p tmp
 
-cp /etc/pki/pki-tomcat/ocsp_admin.csr .
-cp /etc/pki/pki-tomcat/ocsp_audit_signing.csr .
-cp /etc/pki/pki-tomcat/ocsp_signing.csr .
-cp /etc/pki/pki-tomcat/ocsp_sslserver.csr .
-cp /etc/pki/pki-tomcat/ocsp_subsystem.csr .
+cat > tmp/ocsp-standalone-step1.cfg << EOF
+[OCSP]
+pki_admin_email=ocspadmin@example.com
+pki_admin_name=ocspadmin
+pki_admin_nickname=ocspadmin
+pki_admin_password=Secret.123
+pki_admin_uid=ocspadmin
+
+#pki_backup_keys=True
+#pki_backup_password=Secret.123
+
+pki_client_database_password=Secret.123
+pki_client_database_purge=False
+pki_client_pkcs12_password=Secret.123
+
+pki_ds_base_dn=dc=ocsp,dc=pki,dc=example,dc=com
+pki_ds_password=Secret.123
+pki_ds_database=ocsp
+
+pki_security_domain_name=EXAMPLE
+pki_token_password=Secret.123
+
+pki_standalone=True
+pki_external_step_two=False
+
+pki_signing_nickname=ocsp_signing
+pki_audit_signing_nickname=ocsp_audit_signing
+pki_ssl_server_nickname=sslserver
+pki_subsystem_nickname=subsystem
+
+pki_external_admin_csr_path=$PWD/tmp/ocsp_admin.csr
+pki_external_audit_signing_csr_path=$PWD/tmp/ocsp_audit_signing.csr
+pki_external_signing_csr_path=$PWD/tmp/ocsp_signing.csr
+pki_external_sslserver_csr_path=$PWD/tmp/sslserver.csr
+pki_external_subsystem_csr_path=$PWD/tmp/subsystem.csr
+EOF
+
+pkispawn -v -f tmp/ocsp-standalone-step1.cfg -s OCSP
-- 
cgit