Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EST generate SSL certificate #4863

Merged
merged 3 commits into from
Sep 30, 2024
Merged

EST generate SSL certificate #4863

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
d331e48
Fix EST sslserver key name
fmarco76 Sep 26, 2024
b54e262
Update EST CI to consider the file generated
fmarco76 Sep 26, 2024
1c515cc
Generate SSL certificate for EST subsystem
fmarco76 Sep 27, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 5 additions & 39 deletions .github/workflows/est-ds-realm-separate-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,46 +69,12 @@ jobs:

docker exec ca pki info

- name: Create EST server certificates in p12
run: |
docker exec ca pki nss-cert-request --csr estSSLServer.csr \
--ext /usr/share/pki/server/certs/sslserver.conf --subject 'CN=est.example.com'

docker exec ca pki \
-n caadmin \
ca-cert-issue \
--csr-file estSSLServer.csr \
--profile caServerCert \
--output-file estSSLServer.crt

docker exec ca pki nss-cert-import --cert estSSLServer.crt sslserver

docker exec ca pki pkcs12-cert-import sslserver --pkcs12-file $SHARED/est_server.p12 --pkcs12-password Secret.123

- name: Add CA EST user
run: |
docker exec ca pki -n caadmin ca-group-add "EST RA Agents"
docker exec ca pki -n caadmin ca-user-add \
est-ra-1 --fullName "EST RA 1" --password Secret.est
docker exec ca pki -n caadmin ca-group-member-add "EST RA Agents" est-ra-1

- name: Create CA EST user certificate end store top p12
run: |
docker exec ca pki nss-cert-request --csr estUser.csr \
--ext /usr/share/pki/server/certs/admin.conf --subject 'UID=estUser'

docker exec ca pki \
-n caadmin \
ca-cert-issue \
--csr-file estUser.csr \
--profile caUserCert \
--output-file estUser.crt

docker exec ca pki nss-cert-import --cert estUser.crt estUser

docker exec ca pki -n caadmin ca-user-cert-add est-ra-1 --input estUser.crt $CERT_ID

docker exec ca pki pkcs12-cert-import estUser --pkcs12-file $SHARED/est_server.p12 --pkcs12-password Secret.123 --append

- name: Configure CA est profile
run: |
Expand Down Expand Up @@ -177,10 +143,8 @@ jobs:
-s EST \
-D est_realm_url=ldap://estds.example.com:3389 \
-D pki_ca_uri=https://ca.example.com:8443 \
-D est_ca_user_password= \
-D est_ca_user_certificate=estUser \
-D pki_server_pkcs12_path=$SHARED/est_server.p12 \
-D pki_server_pkcs12_password=Secret.123 \
-D pki_cert_chain_path=$SHARED/ca_signing.crt \
-D pki_cert_chain_nickname=caSigning \
-v

- name: Check EST server base dir after installation
Expand Down Expand Up @@ -229,6 +193,7 @@ jobs:
lrwxrwxrwx pkiuser pkiuser logging.properties -> /usr/share/pki/server/conf/logging.properties
-rw-rw---- pkiuser pkiuser password.conf
-rw-rw---- pkiuser pkiuser server.xml
-rw-rw---- pkiuser pkiuser serverCertNick.conf
-rw-rw---- pkiuser pkiuser tomcat.conf
lrwxrwxrwx pkiuser pkiuser web.xml -> /etc/tomcat/web.xml
EOF
Expand Down Expand Up @@ -275,7 +240,7 @@ jobs:
-rw-rw---- pkiuser pkiuser authorizer.conf
-rw-rw---- pkiuser pkiuser backend.conf
-rw-rw-r-- pkiuser pkiuser realm.conf
-rw-r--r-- pkiuser pkiuser registry.cfg
-rw-rw-r-- pkiuser pkiuser registry.cfg
EOF

diff expected output
Expand Down Expand Up @@ -352,6 +317,7 @@ jobs:
lrwxrwxrwx pkiuser pkiuser logging.properties -> /usr/share/pki/server/conf/logging.properties
-rw-rw---- pkiuser pkiuser password.conf
-rw-rw---- pkiuser pkiuser server.xml
-rw-rw---- pkiuser pkiuser serverCertNick.conf
-rw-rw---- pkiuser pkiuser tomcat.conf
lrwxrwxrwx pkiuser pkiuser web.xml -> /etc/tomcat/web.xml
EOF
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/est-ds-realm-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -219,6 +219,7 @@ jobs:
-rw-rw---- pkiuser pkiuser authorizer.conf
-rw-rw---- pkiuser pkiuser backend.conf
-rw-rw-r-- pkiuser pkiuser realm.conf
-rw-rw-r-- pkiuser pkiuser registry.cfg
EOF

diff expected output
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/est-postgresql-realm-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -301,6 +301,7 @@ jobs:
-rw-rw---- pkiuser pkiuser authorizer.conf
-rw-rw---- pkiuser pkiuser backend.conf
-rw-rw-r-- pkiuser pkiuser realm.conf
-rw-rw-r-- pkiuser pkiuser registry.cfg
EOF

diff expected output
Expand Down
Loading
Loading