mirror of
https://github.com/outbackdingo/labca.git
synced 2026-01-27 10:19:34 +00:00
64 lines
3.1 KiB
Bash
Executable File
64 lines
3.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -e
|
|
|
|
perl -i -p0e "s/(\"dnsResolvers\": \[\n).*?(\s+\],)/\1 \"$PKI_DNS\"\2/igs" config/va.json
|
|
perl -i -p0e "s/(\"dnsResolvers\": \[\n).*?(\s+\],)/\1 \"$PKI_DNS\"\2/igs" config/expiration-mailer.json
|
|
sed -i -e "s/\"issuerDomain\": \".*\"/\"issuerDomain\": \"$PKI_DOMAIN\"/" config/va.json
|
|
sed -i -e "s/\"directoryCAAIdentity\": \".*\"/\"directoryCAAIdentity\": \"$PKI_DOMAIN\"/" config/wfe.json
|
|
sed -i -e "s/\"directoryCAAIdentity\": \".*\"/\"directoryCAAIdentity\": \"$PKI_DOMAIN\"/" config/wfe2.json
|
|
|
|
[ -e ../test/hostname-policy.yaml ] && cp ../test/hostname-policy.yaml ./ || true
|
|
[ -e ../boulder/test/hostname-policy.yaml ] && cp ../boulder/test/hostname-policy.yaml ./ || true
|
|
[ -e hostname-policy.json ] && rm hostname-policy.json || true
|
|
if [ "$PKI_DOMAIN_MODE" == "lockdown" ]; then
|
|
echo "Lockdown:" >> hostname-policy.yaml
|
|
echo " - \"$PKI_LOCKDOWN_DOMAINS\"" >> hostname-policy.yaml
|
|
fi
|
|
if [ "$PKI_DOMAIN_MODE" == "whitelist" ]; then
|
|
echo "Whitelist:" >> hostname-policy.yaml
|
|
echo " - \"$PKI_LOCKDOWN_DOMAINS\"" >> hostname-policy.yaml
|
|
fi
|
|
|
|
if [ "$PKI_EXTENDED_TIMEOUT" == "1" ]; then
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/ca-a.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/ca-b.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/admin-revoker.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/wfe.json
|
|
sed -i -e "s/\"timeout\": \"20s\"/\"timeout\": \"40s\"/" config/wfe.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/wfe2.json
|
|
sed -i -e "s/\"timeout\": \"20s\"/\"timeout\": \"40s\"/" config/wfe2.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/ca.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/expiration-mailer.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/ra.json
|
|
sed -i -e "s/\"timeout\": \"20s\"/\"timeout\": \"40s\"/" config/ra.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/ocsp-updater.json
|
|
sed -i -e "s/\"timeout\": \"15s\"/\"timeout\": \"30s\"/" config/orphan-finder.json
|
|
fi
|
|
|
|
sed -i -e "s/\"server\": \".*\"/\"server\": \"$PKI_EMAIL_SERVER\"/" config/expiration-mailer.json
|
|
sed -i -e "s/\"port\": \".*\"/\"port\": \"$PKI_EMAIL_PORT\"/" config/expiration-mailer.json
|
|
sed -i -e "s/\"username\": \".*\"/\"username\": \"$PKI_EMAIL_USER\"/" config/expiration-mailer.json
|
|
sed -i -e "s/\"from\": \".*\"/\"from\": \"$PKI_EMAIL_FROM\"/" config/expiration-mailer.json
|
|
|
|
if [ "$PKI_EMAIL_PASS" != "" ]; then
|
|
sed -i -e "s/.*/$PKI_EMAIL_PASS/" secrets/smtp_password
|
|
fi
|
|
|
|
rm -f test-ca.key
|
|
rm -f test-ca.key.der
|
|
rm -f test-ca.pem
|
|
rm -f test-ca.der
|
|
rm -f test-root.key
|
|
rm -f test-root.key.der
|
|
rm -f test-root.pem
|
|
|
|
cp -p $PKI_INT_CERT_BASE.key test-ca.key
|
|
cp -p $PKI_INT_CERT_BASE.key.der test-ca.key.der
|
|
cp -p $PKI_INT_CERT_BASE.pem test-ca.pem
|
|
cp -p $PKI_ROOT_CERT_BASE.key test-root.key
|
|
cp -p $PKI_ROOT_CERT_BASE.key.der test-root.key.der
|
|
cp -p $PKI_ROOT_CERT_BASE.pem test-root.pem
|
|
|
|
chown -R `ls -l rate-limit-policies.yml | cut -d" " -f 3,4 | sed 's/ /:/g'` .
|