Compare commits
	
		
			3 Commits
		
	
	
		
			56d10bc7e4
			...
			a65651289e
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| a65651289e | |||
| c666bdedd1 | |||
| bd80d1213f | 
							
								
								
									
										2
									
								
								.gitignore
									
									
									
									
										vendored
									
									
										
										
										Normal file → Executable file
									
								
							
							
						
						
									
										2
									
								
								.gitignore
									
									
									
									
										vendored
									
									
										
										
										Normal file → Executable file
									
								
							@ -1,3 +1,5 @@
 | 
			
		||||
/node_modules
 | 
			
		||||
/output
 | 
			
		||||
/custom_tls_cert_gen/output
 | 
			
		||||
 | 
			
		||||
yarn.lock
 | 
			
		||||
							
								
								
									
										106
									
								
								custom_tls_cert_gen/generate-custom-tls.sh
									
									
									
									
									
										Executable file
									
								
							
							
						
						
									
										106
									
								
								custom_tls_cert_gen/generate-custom-tls.sh
									
									
									
									
									
										Executable file
									
								
							@ -0,0 +1,106 @@
 | 
			
		||||
#!/bin/bash
 | 
			
		||||
 | 
			
		||||
set -eu
 | 
			
		||||
 | 
			
		||||
ERROR_COLOR='\033[0;31m';
 | 
			
		||||
HIGHLIGHT_COLOR='\033[0;32m';
 | 
			
		||||
INPUT_COLOR='\033[0;33m';
 | 
			
		||||
NO_COLOR='\033[0m';
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
function print_highlight() {
 | 
			
		||||
  printf "${HIGHLIGHT_COLOR}$1${NO_COLOR}\n"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
function print_error() {
 | 
			
		||||
  printf "${ERROR_COLOR}$1${NO_COLOR}\n"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
function input() {
 | 
			
		||||
  read -p "$(echo -e ${INPUT_COLOR}$1 ${NO_COLOR})" $2
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
input "Specify the output path:" OUTPUT_PATH
 | 
			
		||||
 | 
			
		||||
if [ -z "$OUTPUT_PATH" ]; then
 | 
			
		||||
  OUTPUT_PATH="$(pwd)/output"
 | 
			
		||||
 | 
			
		||||
  if [[ ! -e "$OUTPUT_PATH" ]]; then 
 | 
			
		||||
    mkdir "$OUTPUT_PATH"
 | 
			
		||||
  fi 
 | 
			
		||||
fi
 | 
			
		||||
 | 
			
		||||
if [[ ! -e "$OUTPUT_PATH" ]]; then 
 | 
			
		||||
  print_error "${OUTPUT_PATH} doesn't exist."
 | 
			
		||||
  exit;
 | 
			
		||||
fi
 | 
			
		||||
 | 
			
		||||
input "Do you have cfssl installed?(y/n): " is_cfssl_installed
 | 
			
		||||
 | 
			
		||||
CFSSLEXE=${OUTPUT_PATH}/cfssl
 | 
			
		||||
CFSSLJSONEXE=${OUTPUT_PATH}/cfssljson
 | 
			
		||||
 | 
			
		||||
if [[ "${is_cfssl_installed}" == "y" || "${is_cfssl_installed}" == "Y" ]]; then 
 | 
			
		||||
  input "Specify the path where the cfssl and cfssljson are placed: " TOOL_PATH
 | 
			
		||||
 | 
			
		||||
  CFSSLEXE=${TOOL_PATH}/cfssl
 | 
			
		||||
  CFSSLJSONEXE=${TOOL_PATH}/cfssljson
 | 
			
		||||
 | 
			
		||||
  print_highlight "Your cfssl binary path is ${CFSSLEXE}"
 | 
			
		||||
 | 
			
		||||
  if [ ! -e "$CFSSLEXE" ]; then
 | 
			
		||||
      print_error "no cfssl found."
 | 
			
		||||
      exit;
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  if [ ! -e "$CFSSLJSONEXE" ]; then
 | 
			
		||||
      print_error "no cfssljson found."
 | 
			
		||||
      exit;
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
else
 | 
			
		||||
  # Download the cfssl for users
 | 
			
		||||
  input "Specify your platform(darwin/linux/windows): " PLATFORM  
 | 
			
		||||
 | 
			
		||||
  if [ -z "$PLATFORM" ]; then 
 | 
			
		||||
    print_error "Platform must be provided."
 | 
			
		||||
    exit;
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  print_highlight "Only amd64 is supported"
 | 
			
		||||
 | 
			
		||||
  wget "https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssl_1.6.1_${PLATFORM}_amd64" -O "${OUTPUT_PATH}/cfssl"
 | 
			
		||||
  chmod +x "${OUTPUT_PATH}/cfssl"
 | 
			
		||||
  wget "https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssljson_1.6.1_${PLATFORM}_amd64" -O "${OUTPUT_PATH}/cfssljson"
 | 
			
		||||
  chmod +x "${OUTPUT_PATH}/cfssljson"
 | 
			
		||||
 | 
			
		||||
  print_highlight "Download the cfssl bundle successfully."
 | 
			
		||||
fi
 | 
			
		||||
 | 
			
		||||
cd $OUTPUT_PATH
 | 
			
		||||
 | 
			
		||||
input "Give a name to the CA certificate: " CA_CERT_NAME
 | 
			
		||||
 | 
			
		||||
${CFSSLEXE} print-defaults csr | ${CFSSLEXE} gencert -initca - | ${CFSSLJSONEXE} -bare ${CA_CERT_NAME}-ca 
 | 
			
		||||
 | 
			
		||||
CONFIG_CFSSL_JSON=${OUTPUT_PATH}/cfssl.json
 | 
			
		||||
 | 
			
		||||
cat <<EOF >> ${CONFIG_CFSSL_JSON}
 | 
			
		||||
{
 | 
			
		||||
  "signing": {
 | 
			
		||||
    "default": {
 | 
			
		||||
      "expiry": "87600h",
 | 
			
		||||
      "usages": ["signing", "key encipherment", "server auth"]
 | 
			
		||||
    }
 | 
			
		||||
  }
 | 
			
		||||
}
 | 
			
		||||
EOF
 | 
			
		||||
 | 
			
		||||
input "Give a name to the certificate: " CERT_NAME
 | 
			
		||||
 | 
			
		||||
input "Input the hostname(example.org,127.0.0.1): " CERT_HOSTNAME
 | 
			
		||||
 | 
			
		||||
echo '{}' | ${CFSSLEXE} gencert -ca=ldap-ca.pem -ca-key=ldap-ca-key.pem -config=${CONFIG_CFSSL_JSON} \
 | 
			
		||||
    -hostname="${CERT_HOSTNAME}" - | ${CFSSLJSONEXE} -bare ${CERT_NAME}
 | 
			
		||||
 | 
			
		||||
print_highlight "The custom TLS certificates are successfully generated in the path ${OUTPUT_PATH}."
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user