mirror of
https://github.com/outbackdingo/labca.git
synced 2026-01-27 10:19:34 +00:00
9f77d1a308
When generating a new Root CA certificate, show the key in the GUI and ask the user to store it offline. When importing an existing CA make the root key optional. When the private key is needed but we don't have it, ask the user to provide it. You can now also create a CSR for the Issuer CA that can be signed by the offline Root CA.
28 lines
579 B
Bash
Executable File
28 lines
579 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -e
|
|
|
|
baseDir=$(cd $(dirname $0) && pwd)
|
|
dataDir="$baseDir/data"
|
|
|
|
export PKI_ROOT_CERT_BASE="$dataDir/root-ca"
|
|
export PKI_INT_CERT_BASE="$dataDir/issuer/ca-int"
|
|
|
|
cd /opt/wwwstatic
|
|
|
|
$baseDir/apply-nginx
|
|
|
|
if [ -e "$PKI_ROOT_CERT_BASE.crl" ]; then
|
|
cp $PKI_ROOT_CERT_BASE.crl crl/
|
|
else
|
|
echo "WARNING: no Root CRL file present - please upload one from the manage page"
|
|
fi
|
|
cp $PKI_ROOT_CERT_BASE.pem certs/
|
|
cp $PKI_ROOT_CERT_BASE.der certs/
|
|
cp $PKI_INT_CERT_BASE.pem certs/
|
|
cp $PKI_INT_CERT_BASE.der certs/
|
|
|
|
|
|
cd /opt/boulder/labca
|
|
$baseDir/apply-boulder
|