diff options
| author |   Remigiusz Janeczek <remigiusz.janeczek@nokia.com> | 2020-09-08 13:00:50 +0200 |
|---|---|---|
| committer | Remigiusz Janeczek <remigiusz.janeczek@nokia.com> | 2020-09-15 10:39:22 +0200 |
| commit | ed6e62100249bf099ec8b90a8ad147532b40372b (patch) | |
| tree | 20d17e40c15a5112f9ffdf3dfbf68bf338f6cf19 /kubernetes/contrib/components/ejbca/resources/ejbca-config.sh | |
| parent | 860e4d4c5f71a9bc9f70b7e1127f6a89ef209034 (diff) | |
[CONTRIB] Adjust EJBCA to issue certificates usable by servers.
Add configuration to EJBCA that allows to create keystores with
extendedKeyUsage containing serverAuth.
Issue-ID: AAF-1121
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I6fc1d228acb4edc089be11d66186cfb5006e9ad1
Diffstat (limited to 'kubernetes/contrib/components/ejbca/resources/ejbca-config.sh')
| -rwxr-xr-x | kubernetes/contrib/components/ejbca/resources/ejbca-config.sh | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh b/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh index f1bd07e158..ad10240b94 100755 --- a/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh +++ b/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh @@ -12,6 +12,12 @@ configureEjbca() { ejbca.sh config cmp updatealias --alias cmpRA --key operationmode --value ra ejbca.sh ca editca --caname ManagementCA --field cmpRaAuthSecret --value ${RA_IAK} ejbca.sh config cmp updatealias --alias cmpRA --key responseprotection --value pbe + #Custom EJBCA cert profile and endentity are imported to allow issuing certificates with correct extended usage (containing serverAuth) + ejbca.sh ca importprofiles -d /opt/primekey/custom_profiles + #Profile name taken from certprofile filename (certprofile_<profile-name>-<id>.xml) + ejbca.sh config cmp updatealias --alias cmpRA --key ra.certificateprofile --value CUSTOM_ENDUSER + #ID taken from entityprofile filename (entityprofile_<profile-name>-<id>.xml) + ejbca.sh config cmp updatealias --alias cmpRA --key ra.endentityprofileid --value 1356531849 ejbca.sh config cmp dumpalias --alias cmpRA ejbca.sh config cmp addalias --alias cmp ejbca.sh config cmp updatealias --alias cmp --key allowautomatickeyupdate --value true |