32 lines
844 B
Bash
32 lines
844 B
Bash
|
#XCATDIR=`gettab key=xcatconfdir site.value`
|
||
|
|
# IBM(c) 2007 EPL license http://www.eclipse.org/legal/epl-v10.html
|
||
|
|
if [ -z "$XCATDIR" ]; then
|
||
|
|
XCATDIR=/etc/xcat
|
||
|
|
fi
|
||
|
|
if [ -z "$1" ]; then
|
||
|
|
echo "Usage: $0 <CA name>"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
CNA="$*"
|
||
|
|
|
||
|
|
XCATCADIR=$XCATDIR/ca
|
||
|
|
|
||
|
|
if [ -e $XCATDIR/ca ]; then
|
||
|
|
echo -n "Existing xCAT certificate authority detected at $XCATDIR/ca, delete? (y/n):"
|
||
|
|
read ANSWER
|
||
|
|
if [ $ANSWER != 'y' ]; then
|
||
|
|
echo "Aborting install at user request"
|
||
|
|
exit 0;
|
||
|
|
fi
|
||
|
|
rm -rf $XCATDIR/ca
|
||
|
|
mkdir -p $XCATDIR/ca
|
||
|
|
else
|
||
|
|
mkdir -p $XCATDIR/ca
|
||
|
|
fi
|
||
|
|
sed -e "s@##XCATCADIR##@$XCATCADIR@" /usr/share/xcat/ca/openssl.cnf.tmpl > $XCATCADIR/openssl.cnf
|
||
|
|
cp /usr/share/xcat/ca/Makefile $XCATCADIR/
|
||
|
|
cd $XCATCADIR
|
||
|
|
make init
|
||
|
|
openssl req -nodes -config openssl.cnf -days 2650 -x509 -newkey rsa:2048 -out ca-cert.pem -outform PEM -subj /CN="$CNA"
|
||
|
|
cd -
|