From 08e93406376e318c8e935716403d2366c8402bb8 Mon Sep 17 00:00:00 2001 From: Instrumental Date: Wed, 3 Oct 2018 08:38:52 -0500 Subject: Create Helm Instantiation Issue-ID: AAF-517 Change-Id: I67c8408baa62a779fe5f7fa945dab2f8f9919f39 Signed-off-by: Instrumental --- conf/CA/bootstrap.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'conf/CA') diff --git a/conf/CA/bootstrap.sh b/conf/CA/bootstrap.sh index fba4d6a8..6d4e1aa5 100644 --- a/conf/CA/bootstrap.sh +++ b/conf/CA/bootstrap.sh @@ -81,7 +81,7 @@ echo Sign it openssl ca -batch -config openssl.conf -extensions server_cert \ -cert $SIGNER_CRT -keyfile $SIGNER_KEY \ -policy policy_loose \ - -days 90 \ + -days 365 \ -passin stdin \ -out $BOOTSTRAP_CRT \ -extfile $BOOTSTRAP_SAN \ @@ -94,8 +94,10 @@ EOF cat $BOOTSTRAP_CRT cp $BOOTSTRAP_CRT $BOOTSTRAP_CHAIN cat $SIGNER_CRT >> $BOOTSTRAP_CHAIN +cat $BOOTSTRAP_CHAIN # Note: Openssl will pickup and load all Certs in the Chain file +#openssl pkcs12 -name $FQI -export -in $BOOTSTRAP_CRT -inkey $BOOTSTRAP_KEY -CAfile $SIGNER_CRT -out $BOOTSTRAP_P12 -passin stdin -passout stdin << EOF openssl pkcs12 -name $FQI -export -in $BOOTSTRAP_CHAIN -inkey $BOOTSTRAP_KEY -out $BOOTSTRAP_P12 -passin stdin -passout stdin << EOF $PASSPHRASE $PASSPHRASE @@ -113,4 +115,4 @@ done echo $CADI_X509_ISSUER > $BOOTSTRAP_ISSUER # Cleanup -rm -f $BOOTSTRAP_SAN $BOOTSTRAP_KEY $BOOTSTRAP_CSR $BOOTSTRAP_CRT $BOOTSTRAP_CHAIN $SIGNER_KEY $SIGNER_CRT +rm -f $BOOTSTRAP_SAN $BOOTSTRAP_KEY $BOOTSTRAP_CSR $BOOTSTRAP_CRT $SIGNER_KEY $SIGNER_CRT $BOOTSTRAP_CHAIN -- cgit 1.2.3-korg