1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
#!/bin/sh
user=$1
if [ "$user" == "" ]; then
home=$HOME
else
home=/home/$user
fi
echo HOME=$home
SRC_DIR=`cd ../.. ; pwd`
FIREFOX_DIR=$home/.mozilla/firefox
PROFILE=`grep Path= $FIREFOX_DIR/profiles.ini | awk -F= '{print $2}'`
CA_INSTANCE_NAME=pki-tomcat
KRA_INSTANCE_NAME=pki-tomcat
OCSP_INSTANCE_NAME=pki-tomcat
TKS_INSTANCE_NAME=pki-tomcat
################################################################################
# Importing CA certificate
################################################################################
CA_CERT_NAME="caSigningCert cert-$CA_INSTANCE_NAME CA"
CA_CERT_DIR=/var/lib/pki/$CA_INSTANCE_NAME/alias
echo Exporting CA certificate...
certutil -L -d $CA_CERT_DIR -n "$CA_CERT_NAME" -a > $CA_CERT_DIR/ca.pem
AtoB $CA_CERT_DIR/ca.pem $CA_CERT_DIR/ca.crt
echo Importing CA certificate...
certutil -A -d $FIREFOX_DIR/$PROFILE -n "$CA_CERT_NAME" -i $CA_CERT_DIR/ca.pem -t CT,C,C
################################################################################
# Importing server certificate
################################################################################
SERVER_CERT_NAME="Server-Cert cert-$CA_INSTANCE_NAME"
echo Exporting server certificate...
certutil -L -d $CA_CERT_DIR -n "$SERVER_CERT_NAME" -a > $CA_CERT_DIR/server.pem
AtoB $CA_CERT_DIR/server.pem $CA_CERT_DIR/server.crt
echo Importing server certificate...
certutil -A -d $FIREFOX_DIR/$PROFILE -n "$SERVER_CERT_NAME" -i $CA_CERT_DIR/server.pem -t CT,C,C
################################################################################
# Importing CA admin certificate
################################################################################
CA_ADMIN_CERT_P12=/root/.dogtag/$CA_INSTANCE_NAME/ca_admin_cert.p12
if [ -e $CA_ADMIN_CERT_P12 ]
then
echo Importing CA admin certificate...
pk12util -i $CA_ADMIN_CERT_P12 -d $FIREFOX_DIR/$PROFILE -W Secret123
certutil -M -n caadmin -t u,u,u -d $FIREFOX_DIR/$PROFILE
fi
################################################################################
# Importing KRA admin certificate
################################################################################
KRA_ADMIN_CERT_P12=/root/.dogtag/$KRA_INSTANCE_NAME/kra_admin_cert.p12
if [ -e $KRA_ADMIN_CERT_P12 ]
then
echo Importing KRA admin certificate...
pk12util -i $KRA_ADMIN_CERT_P12 -d $FIREFOX_DIR/$PROFILE -W Secret123
certutil -M -n kraadmin -t u,u,u -d $FIREFOX_DIR/$PROFILE
fi
################################################################################
# Importing OCSP admin certificate
################################################################################
OCSP_ADMIN_CERT_P12=/root/.dogtag/$OCSP_INSTANCE_NAME/ocsp_admin_cert.p12
if [ -e $OCSP_ADMIN_CERT_P12 ]
then
echo Importing OCSP admin certificate...
pk12util -i $OCSP_ADMIN_CERT_P12 -d $FIREFOX_DIR/$PROFILE -W Secret123
certutil -M -n ocspadmin -t u,u,u -d $FIREFOX_DIR/$PROFILE
fi
################################################################################
# Importing TKS admin certificate
################################################################################
TKS_ADMIN_CERT_P12=/root/.dogtag/$TKS_INSTANCE_NAME/tks_admin_cert.p12
if [ -e $TKS_ADMIN_CERT_P12 ]
then
echo Importing TKS admin certificate...
pk12util -i $TKS_ADMIN_CERT_P12 -d $FIREFOX_DIR/$PROFILE -W Secret123
certutil -M -n tksadmin -t u,u,u -d $FIREFOX_DIR/$PROFILE
fi
|
