mcore-tools/src/update-certificate.in

#!/bin/bash

die() { echo "Error: $@"; exit 1; }

usage()
{
	echo "Usage:"
	echo "	$0"
	echo
	echo "The environment variables \$SSLCONFIG and \$SSLDIR will be respected too."
	echo
	die "No certificate name given!"
}

SSLDIR="${SSLDIR-@@SSLDIR@@}"
SSLCONFIG="${SSLCONFIG-${SSLDIR}/openssl.cnf}"
CERTDIR="${SSLDIR}/certs"
KEYDIR="${SSLDIR}/private"
CERTNAME="mcored"
CERTFILE="${CERTDIR}/${CERTNAME}.pem"
REQFILE="${CERTDIR}/${CERTNAME}.csr"
KEYFILE="${KEYDIR}/${CERTNAME}.key"

type -P openssl > /dev/null || die "openssl not found!"
[[ $(id -u) -ne 0 ]] && die "You must be root!"
[ ! -d ${CERTDIR} ] && die "${CERTDIR} directory doesn't exist!"
[ ! -d ${KEYDIR} ] && die "${KEYDIR} directory doesn't exist!"
[ -f ${CERTFILE} ] && die "${CERTFILE} already exists, won't overwrite! Please rename this file first."
[ ! -f ${KEYFILE} ] && die "${KEYFILE} doesn't exist!"

# create a new signing request
openssl req -new -x509 -sha1 -nodes -config ${SSLCONFIG} -key ${KEYFILE} -out ${REQFILE} || die "Certificate request failed!"
# generate the new certificate
openssl x509 -sha1 -subject -fingerprint -in ${REQFILE} -signkey ${KEYFILE} -out ${CERTFILE} -days 365 || die "Fingerprint failed!"
# verify the certificate
openssl verify ${CERTFILE}
1	#!/bin/bash
2
3	die() { echo "Error: $@"; exit 1; }
4
5	usage()
6	{
7	echo "Usage:"
8	echo " $0"
9	echo
10	echo "The environment variables \$SSLCONFIG and \$SSLDIR will be respected too."
11	echo
12	die "No certificate name given!"
13	}
14
15	SSLDIR="${SSLDIR-@@SSLDIR@@}"
16	SSLCONFIG="${SSLCONFIG-${SSLDIR}/openssl.cnf}"
17	CERTDIR="${SSLDIR}/certs"
18	KEYDIR="${SSLDIR}/private"
19	CERTNAME="mcored"
20	CERTFILE="${CERTDIR}/${CERTNAME}.pem"
21	REQFILE="${CERTDIR}/${CERTNAME}.csr"
22	KEYFILE="${KEYDIR}/${CERTNAME}.key"
23
24	type -P openssl > /dev/null \|\| die "openssl not found!"
25	[[ $(id -u) -ne 0 ]] && die "You must be root!"
26	[ ! -d ${CERTDIR} ] && die "${CERTDIR} directory doesn't exist!"
27	[ ! -d ${KEYDIR} ] && die "${KEYDIR} directory doesn't exist!"
28	[ -f ${CERTFILE} ] && die "${CERTFILE} already exists, won't overwrite! Please rename this file first."
29	[ ! -f ${KEYFILE} ] && die "${KEYFILE} doesn't exist!"
30
31	# create a new signing request
32	openssl req -new -x509 -sha1 -nodes -config ${SSLCONFIG} -key ${KEYFILE} -out ${REQFILE} \|\| die "Certificate request failed!"
33	# generate the new certificate
34	openssl x509 -sha1 -subject -fingerprint -in ${REQFILE} -signkey ${KEYFILE} -out ${CERTFILE} -days 365 \|\| die "Fingerprint failed!"
35	# verify the certificate
36	openssl verify ${CERTFILE}