lamassu/lamassu-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

cert-gen script echo specific message and exit on each openssl operation fail (#712)

Browse source
This commit is contained in:
Davit Abulashvili 2018-11-15 19:10:46 +04:00 • committed by Josh Harvey
parent a377777b12
commit 9af204e609
1 changed files with 46 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

18
bin/cert-gen.sh
View file

@ -30,11 +30,22 @@ CA_KEY_PATH=$KEY_DIR/Lamassu_OP_Root_CA.key
CA_PATH=$CERT_DIR/Lamassu_OP_Root_CA.pem CA_PATH=$CERT_DIR/Lamassu_OP_Root_CA.pem
SERVER_KEY_PATH=$KEY_DIR/Lamassu_OP.key SERVER_KEY_PATH=$KEY_DIR/Lamassu_OP.key
SERVER_CERT_PATH=$CERT_DIR/Lamassu_OP.pem SERVER_CERT_PATH=$CERT_DIR/Lamassu_OP.pem
red=`tput setaf 1`
reset=`tput sgr0`
OPENSSL_ERROR_HINT="Make sure that you have installed openssl 1.0 version"
print_error () {
echo "${red}Error: ${reset} $1"
echo $2 # hint
}
{
openssl genrsa \ openssl genrsa \
-out $CA_KEY_PATH \ -out $CA_KEY_PATH \
4096 >> $LOG_FILE 2>&1 4096 >> $LOG_FILE 2>&1
} || { print_error "openssl genrsa to CA_KEY_PATH failed" "$OPENSSL_ERROR_HINT"; exit 1; }
{
openssl req \ openssl req \
-x509 \ -x509 \
-sha256 \ -sha256 \
@ -45,17 +56,23 @@ openssl req \
-out $CA_PATH \ -out $CA_PATH \
-subj "/C=IS/ST=/L=Reykjavik/O=Lamassu Operator CA/CN=lamassu-operator.is" \ -subj "/C=IS/ST=/L=Reykjavik/O=Lamassu Operator CA/CN=lamassu-operator.is" \
>> $LOG_FILE 2>&1 >> $LOG_FILE 2>&1
} || { print_error "openssl req with CA_KEY_PATH failed" "$OPENSSL_ERROR_HINT"; exit 1; }
{
openssl genrsa \ openssl genrsa \
-out $SERVER_KEY_PATH \ -out $SERVER_KEY_PATH \
4096 >> $LOG_FILE 2>&1 4096 >> $LOG_FILE 2>&1
} || { print_error "openssl genrsa SERVER_KEY_PATH failed" "$OPENSSL_ERROR_HINT"; exit 1; }
{
openssl req -new \ openssl req -new \
-key $SERVER_KEY_PATH \ -key $SERVER_KEY_PATH \
-out /tmp/Lamassu_OP.csr.pem \ -out /tmp/Lamassu_OP.csr.pem \
-subj "/C=IS/ST=/L=Reykjavik/O=Lamassu Operator/CN=$DOMAIN" \ -subj "/C=IS/ST=/L=Reykjavik/O=Lamassu Operator/CN=$DOMAIN" \
>> $LOG_FILE 2>&1 >> $LOG_FILE 2>&1
} || { print_error "openssl req with SERVER_KEY_PATH failed" "$OPENSSL_ERROR_HINT"; exit 1; }
{
openssl x509 \ openssl x509 \
-req -in /tmp/Lamassu_OP.csr.pem \ -req -in /tmp/Lamassu_OP.csr.pem \
-CA $CA_PATH \ -CA $CA_PATH \
@ -63,6 +80,7 @@ openssl x509 \
-CAcreateserial \ -CAcreateserial \
-out $SERVER_CERT_PATH \ -out $SERVER_CERT_PATH \
-days 3650 >> $LOG_FILE 2>&1 -days 3650 >> $LOG_FILE 2>&1
} || { print_error "openssl x509 failed" "$OPENSSL_ERROR_HINT"; exit 1; }
rm /tmp/Lamassu_OP.csr.pem rm /tmp/Lamassu_OP.csr.pem