]> WPIA git - nre.git/blob - generateSignerConfig.sh
several fixes on certificate profiles
[nre.git] / generateSignerConfig.sh
1 #!/bin/bash
2
3 set -e
4 [ "$1" == "" ] && echo "Usage: $0 <year>" && exit 1
5 year=$1
6
7 . structure
8
9 installCommKeys() { # peer (server,client)
10     peer="$1"
11     mkdir -p signer-config/keys
12     cp ${year}/ca/env_${year}_1.ca/key.crt signer-config/keys/ca.crt
13     for file in signer_${peer}.{crt,key}; do
14         cp ${year}/keys/$file signer-config/keys/$file
15     done
16
17 }
18
19 mkdir -p signer-config
20 for ca in $STRUCT_CAS; do
21     [ "$ca" == "env" ] && continue
22     for i in $TIME_IDX; do
23         mkdir -p signer-config/ca/${ca}_${year}_${i}
24         cp ${year}/ca/${ca}_${year}_${i}.crt  signer-config/ca/${ca}_${year}_${i}/ca.crt
25     done
26 done
27
28 installCommKeys client
29
30 tar czf signer-client-$year.tar.gz profiles -C signer-config keys ca
31
32 # Updating for server
33 rm signer-config/keys/signer_*
34
35 for ca in $STRUCT_CAS; do
36     [ "$ca" == "env" ] && continue
37     for i in $TIME_IDX; do
38         cp ${year}/ca/${ca}_${year}_${i}.key  signer-config/ca/${ca}_${year}_${i}/ca.key
39     done
40 done
41
42 installCommKeys server
43
44 tar czf signer-server-$year.tar.gz profiles -C signer-config keys ca
45
46 rm -R signer-config