59 lines
1.3 KiB
Bash
59 lines
1.3 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
|
source $(dirname $0)/../utils.sh
|
||
|
|
|
||
|
|
new_ca() {
|
||
|
|
${identity} ca new \
|
||
|
|
--ca.cert-path ${ca_cert_path} \
|
||
|
|
--ca.key-path ${ca_key_path} \
|
||
|
|
--ca.parent-cert-path ${parent_cert_path} \
|
||
|
|
--ca.parent-key-path ${parent_key_path}
|
||
|
|
}
|
||
|
|
|
||
|
|
case $1 in
|
||
|
|
--help)
|
||
|
|
echo "usage: user.sh new|batch"
|
||
|
|
;;
|
||
|
|
new)
|
||
|
|
shift
|
||
|
|
check_help $1 "usage: identity.sh new <parent dir> <parent label> <label> <output dir>"
|
||
|
|
temp_build identity
|
||
|
|
parent_cert_path=${1}/${2}.cert
|
||
|
|
parent_key_path=${1}/${2}.key
|
||
|
|
ca_cert_path=${4}/${3}.cert
|
||
|
|
ca_key_path=${4}/${3}.key
|
||
|
|
|
||
|
|
ensure_dir $4
|
||
|
|
no_overwrite ${ca_cert_path}
|
||
|
|
no_overwrite ${ca_key_path}
|
||
|
|
new_ca
|
||
|
|
|
||
|
|
echo "wrote:"
|
||
|
|
log_list ${ca_cert_path} ${ca_key_path}
|
||
|
|
echo "certificate signed by cert:"
|
||
|
|
log_list ${parent_cert_path} ${parent_key_path}
|
||
|
|
;;
|
||
|
|
batch)
|
||
|
|
shift
|
||
|
|
check_help $1 "usage: user.sh batch <labels file> <parent dir> <parent label> <output dir>"
|
||
|
|
temp_build identity
|
||
|
|
labels=$(cat $1)
|
||
|
|
|
||
|
|
for label in ${labels}; do
|
||
|
|
parent_cert_path=${2}/${3}.cert
|
||
|
|
parent_key_path=${2}/${3}.key
|
||
|
|
ca_cert_path=${4}/${label}.cert
|
||
|
|
ca_key_path=${4}/${label}.key
|
||
|
|
|
||
|
|
ensure_dir $4
|
||
|
|
no_overwrite ${ca_cert_path}
|
||
|
|
no_overwrite ${ca_key_path}
|
||
|
|
new_ca
|
||
|
|
|
||
|
|
log_list ${ca_cert_path} ${ca_key_path}
|
||
|
|
done
|
||
|
|
|
||
|
|
echo "certificates signed by cert:"
|
||
|
|
log_list ${parent_cert_path} ${parent_key_path}
|
||
|
|
;;
|
||
|
|
esac
|