]> WPIA git - nre.git/blob - collectSignerConfig.sh
upd: generate drop-in-able configs for gigi
[nre.git] / collectSignerConfig.sh
1 #!/bin/bash
2
3 set -e
4 [ "$1" == "" ] && echo "Usage: $0 <year>" && exit 1
5 year=$1
6
7 . structure
8 cd generated
9
10 installCommKeys() { # peer (server,client)
11     peer="$1"
12     mkdir -p signer-config/keys
13     cat ${year}/ca/env_${year}_1.ca/key.crt env.ca/key.crt root.ca/key.crt > signer-config/keys/ca.crt
14     for file in signer_${peer}.{crt,key}; do
15         cp ${year}/keys/$file signer-config/keys/$file
16     done
17
18 }
19
20 mkdir -p signer-config
21 for ca in $STRUCT_CAS; do
22     [ "$ca" == "env" ] && continue
23     for i in $TIME_IDX; do
24         mkdir -p signer-config/ca/${ca}_${year}_${i}
25         cp ${year}/ca/${ca}_${year}_${i}.crt  signer-config/ca/${ca}_${year}_${i}/ca.crt
26     done
27 done
28
29 installCommKeys client
30
31 tar czf signer-client-$year.tar.gz -C .. profiles -C generated/signer-config keys ca
32
33 # Updating for server
34 rm signer-config/keys/signer_*
35
36 for ca in $STRUCT_CAS; do
37     [ "$ca" == "env" ] && continue
38     for i in $TIME_IDX; do
39         cp ${year}/ca/${ca}_${year}_${i}.key  signer-config/ca/${ca}_${year}_${i}/ca.key
40     done
41 done
42
43 installCommKeys server
44
45 tar czf signer-server-$year.tar.gz -C .. profiles -C generated/signer-config keys ca
46
47 rm -R signer-config