diff options
author | Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-04-16 13:10:29 +0000 |
---|---|---|
committer | Gerrit Code Review <gerrit@onap.org> | 2020-04-16 13:10:29 +0000 |
commit | 6f80e0ea3ded1679c811d27bb6b8e4d459791691 (patch) | |
tree | 31b610ff39f5343bcf86936bc93cee253c756eea /kubernetes/contrib/components/ejbca/resources/ejbca-config.sh | |
parent | d1943c0a3a483012c49fd4f47c1421bbb01855a2 (diff) | |
parent | d1ca1ee8e3816ca94621f4f9c619ee7c9d52b353 (diff) |
Merge "[Contrib] Add EJBCA Server"
Diffstat (limited to 'kubernetes/contrib/components/ejbca/resources/ejbca-config.sh')
-rwxr-xr-x | kubernetes/contrib/components/ejbca/resources/ejbca-config.sh | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh b/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh new file mode 100755 index 0000000000..f1bd07e158 --- /dev/null +++ b/kubernetes/contrib/components/ejbca/resources/ejbca-config.sh @@ -0,0 +1,28 @@ +#!/bin/bash + +waitForEjbcaToStart() { + until $(curl -kI https://localhost:8443/ejbca/publicweb/healthcheck/ejbcahealth --output /dev/null --silent --head --fail) + do + sleep 5 + done +} + +configureEjbca() { + ejbca.sh config cmp addalias --alias cmpRA + ejbca.sh config cmp updatealias --alias cmpRA --key operationmode --value ra + ejbca.sh ca editca --caname ManagementCA --field cmpRaAuthSecret --value ${RA_IAK} + ejbca.sh config cmp updatealias --alias cmpRA --key responseprotection --value pbe + ejbca.sh config cmp dumpalias --alias cmpRA + ejbca.sh config cmp addalias --alias cmp + ejbca.sh config cmp updatealias --alias cmp --key allowautomatickeyupdate --value true + ejbca.sh config cmp updatealias --alias cmp --key responseprotection --value pbe + ejbca.sh ra addendentity --username Node123 --dn "CN=Node123" --caname ManagementCA --password ${CLIENT_IAK} --type 1 --token USERGENERATED + ejbca.sh ra setclearpwd --username Node123 --password ${CLIENT_IAK} + ejbca.sh config cmp updatealias --alias cmp --key extractusernamecomponent --value CN + ejbca.sh config cmp dumpalias --alias cmp + ejbca.sh ca getcacert --caname ManagementCA -f /dev/stdout > cacert.pem +} + + +waitForEjbcaToStart +configureEjbca |