X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=add_openvpn_host;h=adcb633743a6ee1997ab767b6ae1493c940c1e8a;hb=978bf233a782c62f6ea33399b4effc98bcf2c6a6;hp=fbfd7e96ea9f0260d7199bee3857dd4b00621d1f;hpb=2038ae06b2ce0570da89073e0bee773d5ad7c6cc;p=bin.git diff --git a/add_openvpn_host b/add_openvpn_host index fbfd7e9..adcb633 100755 --- a/add_openvpn_host +++ b/add_openvpn_host @@ -26,6 +26,8 @@ $1 EOF +ORIGDIR=$(pwd); + (cd $TMPDIR; if [ ! -e database ]; then touch database database.attr @@ -38,19 +40,22 @@ EOF # characters. perl -e 'print unpack(q(H*),pack(q(NN),time,$$)),qq(\n)' > serial fi; -) -openssl ca -config "$TMPDIR"/config -policy policy_anything -keyfile "${CAKEY}" -cert "${CACERT}" \ - -out "$TMPDIR"/"${HOST}".cert -outdir "$TMPDIR" -notext -days 9000 -batch -infiles "${HOST}".req; #> /dev/null 2>&1 -( - cd "${TMPDIR}" + openssl ca -config "$TMPDIR"/config -policy policy_anything -keyfile "${ORIGDIR}"/"${CAKEY}" -cert "${ORIGDIR}"/"${CACERT}" \ + -out "$TMPDIR"/"${HOST}".cert -outdir "$TMPDIR" -notext -days 9000 -batch -infiles "${HOST}".req; #> /dev/null 2>&1 chmod a+r "${HOST}".cert rm -f "${HOST}".req - ln -sf "${HOST}".cert "${CLIENT_CERT}" - ln -sf "${HOST}".pem "${CLIENT_KEY}" + mv "${HOST}".cert "${CLIENT_CERT}" + mv "${HOST}".pem "${CLIENT_KEY}" ) -cp "${CLIENT_CONF}" "${TMPDIR}"/; + +cp "${CONF}" "${TMPDIR}"/; +cp "${SERVER_CACERT}" "${TMPDIR}"/; tar -zcf "${HOST}".tar.gz -C "${TMPDIR}" \ - "${HOST}".cert "${HOST}".pem "${CLIENT_CERT}" "${CLIENT_CONF}" \ + "${CLIENT_CERT}" "${CONF}" \ "${CLIENT_KEY}" "${SERVER_CACERT}" rm -rf "${TMPDIR}" + +cp ../ccd/__template__ ../ccd/"${HOST}"; +chmod 0644 ../ccd/"${HOST}"; +HOST="${HOST}" perl -pi -e 's/HOSTNAME/$ENV{HOST}/g' ../ccd/"${HOST}";