trunk/agiletestbed/make-terena-req.sh

#!/bin/sh

# Generate a Terena eScience Server CA compliant CSR.

if [ $# -lt 1 ]; then
    echo "Usage: $0 hostname [ hostname ... ]" >&2
    exit 1
fi

generatedcsrs=

until [ $# -eq 0 ]; do

    # hostname to use in the request
    hostname=$1
    shift
    
    # generate each request in its own subdirectory
    if [ ! -d "$hostname" ]; then
        mkdir "$hostname"
    fi
    
    # be mindful of existing files; reuse the newkey.pem file if it
    # exists, otherwise openssl will generate it.
    key="$hostname/newkey.pem"
    if [ -r "$key" ]; then
        # reuse it
        usekey="-key $key"
    else
        # let openssl generate it
        usekey=""
    fi

    # don't overwrite existing requests
    csr="$hostname/newrequest.csr"
    if [ -f "$csr" ]; then
        echo "ERROR: $csr already exists, not generating a new request" >&2
        continue
    fi

    # at this point, we're definitely going to create a new request
    # we need to generate an openssl cnf file specific to the request.
    
    cat > "$hostname/newrequest.cnf" <<EOF
[ req ]
default_bits            = 2048
default_keyfile         = $hostname/newkey.pem
distinguished_name      = req_distinguished_name
req_extensions          = v3_ext
prompt                  = no

[ req_distinguished_name ]
 0.C = NL
 1.O = Stichting FOM
 2.OU = Nikhef
 CN = $hostname

[ v3_ext ]

 subjectAltName = DNS:$hostname

EOF

    openssl req -nodes -new -out "$csr" -text $usekey -config "$hostname/newrequest.cnf"
    if [ $? -eq 0 ]; then
        generatedcsrs="$generatedcsrs
$csr"
    else
        echo "ERR: openssl req failed." >&2
        echo "Failed command: 'openssl req -nodes -new -out $csr -text $usekey -config $hostname/newrequest.cnf'"
        continue
    fi
        
done


echo "Done. Generated CSRs:$generatedcsrs"


1	dennisvd	2393	#!/bin/sh
2
3			# Generate a Terena eScience Server CA compliant CSR.
4
5			if [ $# -lt 1 ]; then
6			echo "Usage: $0 hostname [ hostname ... ]" >&2
7			exit 1
8			fi
9
10			generatedcsrs=
11
12			until [ $# -eq 0 ]; do
13
14			# hostname to use in the request
15			hostname=$1
16			shift
17
18			# generate each request in its own subdirectory
19			if [ ! -d "$hostname" ]; then
20			mkdir "$hostname"
21			fi
22
23			# be mindful of existing files; reuse the newkey.pem file if it
24			# exists, otherwise openssl will generate it.
25			key="$hostname/newkey.pem"
26			if [ -r "$key" ]; then
27			# reuse it
28			usekey="-key $key"
29			else
30			# let openssl generate it
31			usekey=""
32			fi
33
34			# don't overwrite existing requests
35			csr="$hostname/newrequest.csr"
36			if [ -f "$csr" ]; then
37			echo "ERROR: $csr already exists, not generating a new request" >&2
38			continue
39			fi
40
41			# at this point, we're definitely going to create a new request
42			# we need to generate an openssl cnf file specific to the request.
43
44			cat > "$hostname/newrequest.cnf" <<EOF
45			[ req ]
46			default_bits = 2048
47			default_keyfile = $hostname/newkey.pem
48			distinguished_name = req_distinguished_name
49			req_extensions = v3_ext
50			prompt = no
51
52			[ req_distinguished_name ]
53			0.C = NL
54			1.O = Stichting FOM
55			2.OU = Nikhef
56			CN = $hostname
57
58			[ v3_ext ]
59
60			subjectAltName = DNS:$hostname
61
62			EOF
63
64			openssl req -nodes -new -out "$csr" -text $usekey -config "$hostname/newrequest.cnf"
65			if [ $? -eq 0 ]; then
66			generatedcsrs="$generatedcsrs
67			$csr"
68			else
69			echo "ERR: openssl req failed." >&2
70			echo "Failed command: 'openssl req -nodes -new -out $csr -text $usekey -config $hostname/newrequest.cnf'"
71			continue
72			fi
73
74			done
75
76
77			echo "Done. Generated CSRs:$generatedcsrs"
78
79
80
grid.support@nikhef.nl	ViewVC Help
Powered by ViewVC 1.1.28