blob: 6aac3cad257a77179aeb3591673e23548ac98457 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
|
#!/bin/sh
set -e
cd /distcenter
/distcenter/bin/create_ca.sh
cd /distcenter/data
DCOUNT=$(ls -d host_* 2> /dev/null | wc -l)
if [ "$DCOUNT" != "0" ]
then
DLIST=`ls -d host_*`
#Iterate over all hosts (host in k8s corresponds node)
for DIR in $DLIST; do
echo $DIR
cp /distcenter/ca/ca.cert /distcenter/data/$DIR
cd /distcenter/data/$DIR
/dup/bin/ossl_tpm_duplicate -pemfile /distcenter/ca/privkey.pem -parentPub \
/distcenter/data/$DIR/out_parent_public -dupPub dupPub -dupPriv dupPriv -dupSymSeed \
dupSymseed -dupEncKey dupEncKey
done
else
cd /distcenter/ca
cat /distcenter/passphrase/passphrase | gpg --no-tty --symmetric -z 9 --require-secmem \
--cipher-algo AES256 --s2k-cipher-algo AES256 --s2k-digest-algo SHA512 \
--s2k-mode 3 --s2k-count 65000000 --compress-algo BZIP2 \
--passphrase-fd 0 privkey.pem
cp /distcenter/ca/privkey.pem.gpg /distcenter/data
cp /distcenter/ca/ca.cert /distcenter/data
fi
|
