summaryrefslogtreecommitdiffstats
path: root/conf/CA
diff options
context:
space:
mode:
authorInstrumental <jonathan.gathman@att.com>2018-10-03 08:38:52 -0500
committerInstrumental <jonathan.gathman@att.com>2018-10-03 08:39:02 -0500
commit08e93406376e318c8e935716403d2366c8402bb8 (patch)
tree27e405ebba6becee53c6842e238a45a871a9448f /conf/CA
parentaebee0032fe3d636f5c077df7bb5ee705bb38c44 (diff)
Create Helm Instantiation
Issue-ID: AAF-517 Change-Id: I67c8408baa62a779fe5f7fa945dab2f8f9919f39 Signed-off-by: Instrumental <jonathan.gathman@att.com>
Diffstat (limited to 'conf/CA')
-rw-r--r--conf/CA/bootstrap.sh6
1 files changed, 4 insertions, 2 deletions
diff --git a/conf/CA/bootstrap.sh b/conf/CA/bootstrap.sh
index fba4d6a8..6d4e1aa5 100644
--- a/conf/CA/bootstrap.sh
+++ b/conf/CA/bootstrap.sh
@@ -81,7 +81,7 @@ echo Sign it
openssl ca -batch -config openssl.conf -extensions server_cert \
-cert $SIGNER_CRT -keyfile $SIGNER_KEY \
-policy policy_loose \
- -days 90 \
+ -days 365 \
-passin stdin \
-out $BOOTSTRAP_CRT \
-extfile $BOOTSTRAP_SAN \
@@ -94,8 +94,10 @@ EOF
cat $BOOTSTRAP_CRT
cp $BOOTSTRAP_CRT $BOOTSTRAP_CHAIN
cat $SIGNER_CRT >> $BOOTSTRAP_CHAIN
+cat $BOOTSTRAP_CHAIN
# Note: Openssl will pickup and load all Certs in the Chain file
+#openssl pkcs12 -name $FQI -export -in $BOOTSTRAP_CRT -inkey $BOOTSTRAP_KEY -CAfile $SIGNER_CRT -out $BOOTSTRAP_P12 -passin stdin -passout stdin << EOF
openssl pkcs12 -name $FQI -export -in $BOOTSTRAP_CHAIN -inkey $BOOTSTRAP_KEY -out $BOOTSTRAP_P12 -passin stdin -passout stdin << EOF
$PASSPHRASE
$PASSPHRASE
@@ -113,4 +115,4 @@ done
echo $CADI_X509_ISSUER > $BOOTSTRAP_ISSUER
# Cleanup
-rm -f $BOOTSTRAP_SAN $BOOTSTRAP_KEY $BOOTSTRAP_CSR $BOOTSTRAP_CRT $BOOTSTRAP_CHAIN $SIGNER_KEY $SIGNER_CRT
+rm -f $BOOTSTRAP_SAN $BOOTSTRAP_KEY $BOOTSTRAP_CSR $BOOTSTRAP_CRT $SIGNER_KEY $SIGNER_CRT $BOOTSTRAP_CHAIN